Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

XSS in hidden input fields

Summary

Gareth Heyes shows how to execute XSS inside hidden input fields: Firefox fires onclick when an access key activates the element. Includes the PoC vector and key combinations.
Published
Collected

original ↗

Related coverage

back