diff --git a/cheatsheets/XSS_Filter_Evasion_Cheat_Sheet.md b/cheatsheets/XSS_Filter_Evasion_Cheat_Sheet.md index 95f065eeea..8e826e6720 100644 --- a/cheatsheets/XSS_Filter_Evasion_Cheat_Sheet.md +++ b/cheatsheets/XSS_Filter_Evasion_Cheat_Sheet.md @@ -18,7 +18,10 @@ This is a normal XSS JavaScript injection, and most likely to get caught but I s The following is a "polygot test XSS payload." This test will execute in multiple contexts including html, script string, js and URL. Thank you to [Gareth Heyes](https://twitter.com/garethheyes) for this [contribution](https://twitter.com/garethheyes/status/997466212190781445). -`javascript:/*-->` +``` +javascript:/*--> + +``` ### Malformed A Tags