[JS/HTML/SQL] 666 lines of XSS

[sico]

This list has been floating around for years, a great deal of which I suspect was taken from O-WASP documents.

I'm posting this for three reasons:

• I desperately want to see more activity in this section of the forums.
• If you are a new or maybe even mid-level developer, this may open your eyes to some needed changes to your code practices. Or maybe you are in PCI compliance guy and you can pluck from these examples to test your client's site.
• This might seem like common sense to some, but the internet is literally infested with this kind of stuff due to poor or obsolete coding practices.

I'll not paste the list directly here as I do not want to risk causing any issues to the ownedcore server. Even pastebin flagged me as a bot and required further verification when creating the paste.

It can be viewed at the following pastebin link (hopefully it isn't censored out) -> 666 Lines of XSS - Pastebin.com