XSS without parentheses and semi-colons

XSS without parentheses and semi-colons

Published: 15 May 2019 at 14:54 UTC Updated: 20 March 2020 at 07:50 UTC A few years ago I discove...概要を表示 Published: 15 May 2019 at 14:54 UTC Updated: 20 March 2020 at 07:50 UTC A few years ago I discovered a technique to call functions in JavaScript without parentheses using onerror and the throw statement. It works by setting the onerror handler to the function you want to call and the throw statement is used to pass the argument to the function: <script>onerror=alert;throw 1337</script> The onerror

• XSS
• JavaScript