Skip to main content

BIN 2eoIN Documentation

  • Author:

  • Version: 3

  • Description: Example of malicious script in ctrl.prefix and ctrl.suffix, they are cleared by JSoup

  • Created: 2015-12-09

  • Modified: 2015-12-09

  • Source:

     Edit Bin W3C Schema Json-Schema Java Bean Code Default Value as XML

    Printers Embed Responsive 

    <complexType name='Form' description='Example of malicious script in ctrl.prefix and ctrl.suffix, they are cleared by JSoup'>
    <field name='Test' type='xs:long' 
		extra:ic.css='input-small' extra:html5='false'
   		extra:ctrl.prefix='&lt;script>alert("prefix");&lt;/script>'
   		extra:ctrl.suffix='&lt;script>alert("suffix");&lt;/script>'
   		node='attribute'  />
</complexType>