3 ms·
I'm not sure I agree that there's any exploit here. The crux of the claim seems to be that JavaScript code in an onbeforetoggle attribute is "unlikely to be fil
by couchand 3y ago
I'm not sure I agree that there's any exploit here. The crux of the claim seems to be that JavaScript code in an onbeforetoggle attribute is "unlikely to be filtered by a WAF".
In any case, this game doesn't involve any of that, it just uses popovers as fancy internal links.