3 ms·
You're right. It still works in Chrome though...
by fdb 10y ago
You're right. It still works in Chrome though...
- Kenji 10y agoIf someone has trouble making the exploit work in Chrome: The developer tools replace all ' with " if you inspect the element. Therefore, it misleads you into thinking that the website encloses attributes in " ", whereas instead it is enclosed in ' '.
- grenoire 10y agoThis did throw me off initially.