I just hat tricked another set of bugs. (Placeholder)
-
Continuing the discussion from stuff:
<img src="/uploads/default/7295/db4dd539baa1be73.png" width="667" height="499">
<div id="mycode" expr="alert('hah!')" style="background:url('javascript:eval(document.all.mycode.expr)')">
<div id="mycode" expr="alert('hah!')" style="background:url('java
script:eval(document.all.mycode.expr)')">
<div id="mycode" expr="alert('double quote: ' + String.fromCharCode(34))" style="background:url('java
script:eval(document.all.mycode.expr)')"><z http://namb.la/popular/tech.html>
Why does <http://namb.la/popular/tech.html> turn into <http://namb.la/popular/tech.html>?