Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded
In this lab we run a cross site scripting attack by bypassing the escaping of injected single quotes taking place on the server. This lab is provided by Portswigger with the title - Reflected XSS into a JavaScriipt string with angle brackets and doubles quotes HTML-encoded.
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
https://buymeacoffee.com/zenshell
Join our Discord
/ discord
00:00 Introduction
00:38 Exploring the lab
01:20 Attempting javascript string breakout
02:52 Escaping escaping
04:01 Solving the lab
05:31 Summary