Gareth Heyes
@garethheyes.co.uk
javascript:/*--></title></style></textarea></script></xmp><svg/onload='-/"/-/onmouseover=1/-/[*/[]/-alert(1)//'>
https://garethheyes.co.uk/#latestBook
https://garethheyes.co.uk/#latestBook
BTW you can make it better without a further HTTP request. Stick a data url in the Link header :D
November 9, 2025 at 9:54 PM
BTW you can make it better without a further HTTP request. Stick a data url in the Link header :D
That's awesome! You can put CSS in the Link header on Firefox 😉 that way you can have blank source code hehe
November 7, 2025 at 5:53 PM
That's awesome! You can put CSS in the Link header on Firefox 😉 that way you can have blank source code hehe
The more elegant version is on the XSS cheat sheet:
portswigger.net/web-security...
portswigger.net/web-security...
Cross-Site Scripting (XSS) Cheat Sheet - 2025 Edition | Web Security Academy
Interactive cross-site scripting (XSS) cheat sheet for 2025, brought to you by PortSwigger. Actively maintained, and regularly updated with new vectors.
portswigger.net
October 30, 2025 at 12:51 PM
The more elegant version is on the XSS cheat sheet:
portswigger.net/web-security...
portswigger.net/web-security...