svg-foreignObject.svg

cirosantilli · Jul 21, 2020 · 65cd34c · 65cd34c
1 parent 12d737e
commit 65cd34c
Show file tree

Hide file tree

Showing 3 changed files with 95 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -12,3 +12,6 @@ Tests to see how Git web interfaces like GitHub and GitLab work exactly detect b
 1.  asciidoc
     1.  [adoc.adoc](adoc.adoc)
     1.  [xref-header-infinite-loop.adoc](xref-header-infinite-loop.adoc)
+
+<img src="svg.svg">
+<img src="svg-foreignObject.svg">
diff --git a/files.md b/files.md
@@ -85,4 +85,5 @@ XSS attempts:
 - [<script>](<script>)
 - `<script src="data:text;utf8,alert('xss')">`
 - [svg.svg](svg.svg), with an XSS attempt
+  - [svg-foreignObject.svg](svg-foreignObject.svg), CSS + XSS attempt
 - [sym-xss](sym-xss). It's path is an XSS attempt.
diff --git a/svg-foreignObject.svg b/svg-foreignObject.svg