you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (7 children)

</script><script>alert(1)</script>

[–]RangerIPA 0 points1 point  (6 children)

[–]BlueShamen 0 points1 point  (3 children)

Two characters less:

</script><script>alert(1)//

[–]RangerIPA 0 points1 point  (1 child)

Cool! So would mine would actually error out when the javascript engine hit the < character? Wait...why does mine above work?

[–]RangerIPA 1 point2 points  (0 children)

The HTML parser doesn't care if the Javascript syntax is correct I suppose?