I made a major improvement to the XSS calculator today, where now it can properly handle linebreaks in the ASCII text. Before I was seeing some errors in the way it both encoded and decoded those special chars in hex and decimal but it should work as expected now. The funny thing is you can see the difference in IE and Firefox where Firefox sees a linebreak as %0A and IE sees it as %OD%OA. Enjoy.

This entry was posted on Thursday, January 1st, 1970 at 12:00 am and is filed under XSS, Webappsec. You can leave a response as well.