4 ms·
I remember sending fake Yahoo login forms as html attachments. eval() & alert() fix: `const ev = 'ev', al = 'al', ert = 'ert'; window[ev + al](window[al + ert]
by yvoschaap 4y ago
I remember sending fake Yahoo login forms as html attachments. eval() & alert() fix:
`const ev = 'ev', al = 'al', ert = 'ert'; window[ev + al](window[al + ert]('hi'))`
- londons_explore 4y agoblock the word 'window' and I don't think your approach is possible?
- ghayes 4y agoCurious if `evevalal` would have worked…
- lalopalota 4y ago"evreviewal" probably not