3 ms·
Using <script> ... as a payload won't work because the browser won't execute scripts added after the page has loaded.
by wasd 12y ago
Using <script> ... as a payload won't work because the browser won't execute scripts added after the page has loaded.
- goblin89 12y agoThe browser smartly won't execute scripts added through innerHTML, but it probably should be noted that jquery's html() method will[0]. There's always a way to shoot yourself in the foot. :) [0] http://api.jquery.com/html/ http://api.jquery.com/html/