Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Why JS Injection isn\'t workin\'?


ghostraider100's Avatar
Member
0 0

I\'ve tried a JS sample test in a Website to find a Vuln in a Comment, Like this

But the site shows the script directly as given but not the alert box, why is that so?


dami3n's Avatar
Member
5 0

Might be down to the browser or a server command/block. I have noticed that firefox doesn\'t support java-script commands in the URL and chrome also is a bit funny about them alot of people are doing them via bookmarklets instead. Also check if you javascript is fully enabled. No script etc.


Beat_Slayer's Avatar
Member
0 0

Well if you use Firefox, there is this browser.urlbar.filter.javascript on about:config that you can set to false, to allow javascript on the url bar.