XSS Test
The task is to bring up an javascript alert box (or anything else malicious). Either trough clicking or automatically.
We're especially interested in XSS problems with any of the three input filters selected (tidy, dom or striptags)
Without any input filter selected below, you'll certainly find XSS problems, with which we can live with as it's absolutely not the recommended setting.
Write your code into this box and hit submit. See
my (old) blog post
for further details. and
this newer blog post
Clean HTML Code up with:
Filter In:
Tidy
Dom
Striptags
None
Filter Out:
Tidy
Dom
Striptags
None
The source for the cleaning