Get the exact code in the page source yet invalid

JohnWeston
5 years ago | edited 5 years ago

0

After I try to input something like >> <script>

I successfully get the exact same code <script>alert('HackThis!!');</script> in the source page as the chanllenge required and get a pop up dialogue but it still shows that my answer is invalid, just want to know why? Maybe a hint. THX

2replies

2voices

173views

dimooz
5 years ago

0

Even if your injection seems to be working, this level can’t handle all of the possible ways to get it done. Just try something else similar, you’re really close. A lot of challengers have encountered this issue on that level, you’re not the only one.

JohnWeston
5 years ago

0

Finished in Firefox, it seems that Chrome will try to filter some of these >> XSS code….Orz

Discussion thread has been locked. You can no longer add new posts.