hax0rgb/cors to xss

Created October 17, 2016 06:57

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/hax0rgb/839a2923cb056323dc34b1f214bd0367.js"></script>
Save hax0rgb/839a2923cb056323dc34b1f214bd0367 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

cors to xss

	<?php header("Access-Control-Allow-Origin: *"); ?>
	<img src=1 onerror=alert(document.domain)>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment