Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
namanaggarwal
on May 29, 2014
|
parent
|
context
|
favorite
| on:
Google's XSS game
still not able to get :-(
sourthyme
on May 29, 2014
|
next
[–]
Use the text input instead of the url.
erid
on May 29, 2014
|
parent
|
next
[–]
You could use %2b instead of + on the URL and it'll work, or just * as mentioned above.
voxtex
on May 29, 2014
|
prev
|
next
[–]
' + alert() + '
worked for me.
codeman123
on May 29, 2014
|
prev
[–]
can't solve it either :-/
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
