vendredi 5 février 2016

What Possible XSS Vectors Can we Us

I am working on creating some sort of POC of XSS. And I am getting a problem in this with meta tags.

While checking the source code, this is how the user input entered:

<meta content='https://site/?lol=1' property='og:url'>

The lol=1 can be controlled by the user input. I have tried many ways to get XSS prompt here. But no luck so far.

Can anyone please help me out with this one.

Thanks




Aucun commentaire:

Enregistrer un commentaire