4 ms·

Warning: XSS http://realfavicongenerator.net/favicon_checker?site=%3Cscript%3Ealert%28%22xss%22%29;%3C/script%3E http://realfavicongenerator.net/favicon_checke

• ToastyMallows 12y ago
  Didn't work for me, maybe it's fixed already?
  • azdle 12y ago
    Worked for me in FF just now.
    • ttty 12y ago
      chrome doesn't work
      • ctz 12y ago
        Chrome's XSS auditor catches it: The XSS Auditor refused to execute a script in 'http://realfavicongenerator.net/favicon_checker?site=%3Cscript%3Ealert%28%22xss%22%29;%3C/script%3E' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.