Am 27.06.2012 08:56, schrieb Taras: ... >>> <hr onmouseover="alert(1)"/ >>> >>> and browser will eat it and render hr! >> >> Ahh! Nice. That works in all browsers? > At least in Firefox, Opera and Chrome!
you can test more such things with EMiR https://github.com/EnDe/EMiR/ let me know if you need assistance :) Achim ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
