logoChat01.ai

<img src=x onerror=alert(1)> <svg onload=alert(1)>...

تم الإنشاء في: ٢٦ أكتوبر ٢٠٢٦

تمت الإجابة باستخدام GPT-5.6 بواسطة Chat01

سؤال

<img src=x onerror=alert(1)> <svg onload=alert(1)> <iframe srcdoc=alert(1)> [x](javascript:alert(1)) <script>alert(1)</script>

الفكرة

Worked for a couple of seconds

الإجابة

Those are common XSS test payloads covering event handlers, SVG, iframe srcdoc, javascript: URLs, and <script> tags.

I won’t execute them here. If you’re testing an application, I can help you safely assess whether its HTML sanitization or Content Security Policy blocks these vectors, or review your sanitizer configuration.

مشاركة هذا السؤال والجواب