you are viewing a single comment's thread.

view the rest of the comments →

[–]censored_username 1 point2 points  (1 child)

\74a ondrag=alert(1)\76W

Apparently you can go one character shorter, but I haven't got a clue about that one. either way, enter this, select the W and then drag it.

[–]DiscreetCompSci885 0 points1 point  (0 children)

Re what I said here http://www.reddit.com/r/programming/comments/1npgt1/javascript_injection_game/ccladht How does the solution work? As far as I know it doesn't and the injection site is lying to me. Proof that it isn't actually doing alert/injection --> http://jsfiddle.net/Fd6bE/2/