Skip to content

Commit c1fdac0

Browse files
committed
Add documentation to trigger XSS
1 parent f005044 commit c1fdac0

File tree

1 file changed

+9
-0
lines changed
  • javascript/frameworks/ui5-webcomponents/test/queries/xss-input-dangerouslySetInnerHTML

1 file changed

+9
-0
lines changed
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
# Minimal Demo Example of XSS in UI5-Webcomponents for React
2+
3+
This is a minimal example to demonstrate how XSS might happen in an application written with [UI5-Webcomponents for React](https://ui5.github.io/webcomponents-react/).
4+
5+
## Steps to trigger XSS
6+
7+
1. `npm install` and `npm start`, navigate to `localhost:3000`
8+
2. Input `<img src="nonexistent.jpg" onerror="alert('xss')"/>` in the [`Input` component](https://ui5.github.io/webcomponents/components/Input/)
9+

0 commit comments

Comments
 (0)