4 ms·
Didn't work for me, maybe it's fixed already?
by ToastyMallows 12y ago
Didn't work for me, maybe it's fixed already?
- azdle 12y agoWorked for me in FF just now.
- ttty 12y agochrome doesn't work
- ctz 12y agoChrome's XSS auditor catches it: The XSS Auditor refused to execute a script in 'http://realfavicongenerator.net/favicon_checker?site=%3Cscript%3Ealert%28%22xss%22%29;%3C/script%3E' because its source code was found within the request. The auditor was enabled as the server sent neither an 'X-XSS-Protection' nor 'Content-Security-Policy' header.