Okay, I found another nice one that doesn’t use any JavaScript directives or script tags. Using a .htc file pulled in by a STYLE parameter allows JavaScript to run in IE and NS8.0 on trusted site settings.

This entry was posted on Thursday, January 1st, 1970 at 12:00 am and is filed under XSS, Webappsec. You can leave a response as well.