blob: c701a0c76c40dee5c9e1a96385e3d36788338f60 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script>
<![CDATA[
function boom()
{
var a = document.createElement("div");
a.innerHTML = "<script>1;<\/script>";
var b = document.createElement("div")
try { b.innerHTML = "<"; } catch (invalidXML) { }
document.documentElement.appendChild(a);
}
]]>
</script>
</head>
<body onload="boom();"></body>
</html>
|
