Avatar - Bahaà Addin Balashoni
Bahaà Addin Balashoni
flipped into Codazine
XSS without parentheses and semi-colons

XSS without parentheses and semi-colons

portswigger.net

A few years ago I discovered a technique to call functions in JavaScript without parentheses using onerror and the throw statement. It works by …

View on portswigger.net