Merge pull request cure53#17 from johannburkard/master

Nice little javascript: URI action.
Zapgithubexe · Nov 24, 2016 · ffa4abd · ffa4abd
2 parents 419675a + a0d7898
commit ffa4abd
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/leak.html b/leak.html
@@ -231,6 +231,9 @@
     <frame src="https://leaking.via/frame-src"></frame>
 </frameset>
 <iframe src="view-source:https://leaking.via/iframe-src-viewsource"></iframe>
+<iframe src="javascript:'&lt;img src=https://leaking.via/iframe-javascript-src&gt;'"></iframe>
+<iframe src="javascript:'&lt;iframe src=&quot;javascript:\&apos;&lt;img src=https://leaking.via/iframe-javascript-src-2&gt;\&apos;&quot;&gt;&lt;/iframe&gt;'"></iframe>
+<iframe src="javascript:atob('PGltZyBzcmM9Imh0dHBzOi8vbGVha2luZy52aWEvaWZyYW1lLWphdmFzY3JpcHQtc3JjLTMiPg==')"></iframe>
 
 <!-- 
 %Menu