blob: 9f6e975903e7d29e5879b1c83678314b5f16901c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
<html>
<head>
<title>CSP Base-URI Violation Test </title>
<base href="https://evil.com/">
</head>
<body>
<h1> Crashing the Base Element</h1>
</body>
<script>
"use strict";
window.violate = ()=>{
document.head.innerHTML = "";
const b = document.createElement("base");
b.href = "https://evil.com";
document.head.append(b);
};
</script>
</html>
|
