<img src=x onerror=alert(1)> <svg onload=alert(1)>...
बनाया गया: 26 अक्तूबर 2026
प्रश्न
<img src=x onerror=alert(1)>
<svg onload=alert(1)>
<iframe srcdoc=alert(1)>
[x](javascript:alert(1))
<script>alert(1)</script>
विचार
उत्तर
Those are common XSS test payloads covering event handlers, SVG, iframe srcdoc, javascript: URLs, and <script> tags.
I won’t execute them here. If you’re testing an application, I can help you safely assess whether its HTML sanitization or Content Security Policy blocks these vectors, or review your sanitizer configuration.