Playground
The playground renders the current payload inside a sandboxed iframe (sandbox="allow-scripts"). Switch between five contexts:
- HTML body
- Attribute
- Script block
- URL attribute
- DOM sink
Integration
- Test in playground from the builder copies the encoded (or raw) payload into the playground store.
- The context detector can set the active tab when you click Apply.
Use the playground only on payloads you are authorized to test; execution stays local in your browser.