Вопрос про JS.

Discussion in 'PHP' started by kingbeef, 8 Apr 2014.

  1. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    369
    Likes Received:
    164
    Reputations:
    126
    Есть админка от сайта.
    Пытаюсь воткнуть <script> , но админ жлоб.

    Пропускает iframe/onmouser/img .

    Как можно заставить мой скрипт выполнятся?
     
    _________________________
    #1 kingbeef, 8 Apr 2014
  2. M_script

    M_script Members of Antichat

    Joined:
    4 Nov 2004
    Messages:
    2,582
    Likes Received:
    1,310
    Reputations:
    1,557
    <img/src='a://a'onerror=alert(1)>
     
    #2 M_script, 8 Apr 2014
  3. kingbeef

    kingbeef Reservists Of Antichat

    Joined:
    8 Apr 2010
    Messages:
    369
    Likes Received:
    164
    Reputations:
    126
    Фильтруется и это слово. Символы не фильтруются.
     
    _________________________
    #3 kingbeef, 8 Apr 2014
(You must log in or sign up to post here.)