<< Back

XSS: Hello, world!

Sinario

Pablo the web developer has forgotten to implement input validation on the username parameter.

Notes:

alert(document.domain) to win!

Play Sandbox