As per usual, there are solutions for all challenges
Can you get the page to calculate 7*7 and output 49 all on it's own?
Can you also get a pop-up? This will require you to escape the sandbox.
This is a simple Vue.js application, just to mix it up! The code here uses htmlentities
, which is intended to be safe against XSS. However, there's a way to trigger a popup using a carefully crafted payload. Can you figure it out?
The following block displays the input
parameter after escaping:
This application uses Vue.js for dynamic interaction. Try experimenting with inputs and payloads!