Search

context: HTML body

Results for:

Method: identify the exact context your input lands in, then craft the payload that breaks OUT of that context. Prove execution by making your injected JavaScript call /m03/api/solve/r_body (e.g. with fetch()). No external collector needed. Server-rendered sinks also auto-mark once a value that would run is reflected/stored here.

More reflected contexts to practise

Attribute context - input lands inside value="..."
JavaScript string context - input lands inside a JS string literal
URL / href context - input becomes a link target
Filtered input - a blacklist that only knows one tag
Bracket-encoded attribute - < and > are neutralised, quotes are not
Weak-CSP notice - a page that ships a Content-Security-Policy anyway