<img src="x" onerror="alert('hi! here is some fresh new xss, enjoy
')">
comments
Highlighted comment
Did this ever work? I found out that almost none of the attributes get passed through the API
*I tested style attribute too. Didn’t work
<img src="x" onerror="alert('hi! here is some fresh new xss, enjoy ')">
Did this ever work? I found out that almost none of the attributes get passed through the API
*I tested style attribute too. Didn’t work