Anti-XSS for PHP

{ @hacker | "try to bypass this XSS filter" }

github.com/voku/anti-xss



If you need some inspiration for new attacks, take a look at the PHPUnit tests. I have already included test from e.g. "DOMPurify", "JS-XSS" and "LaravelSecurity". Here you can find some more XSS strings:



PS: This demo, is also available at github.com and you can also create pull-requests, here.

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>

keyword(s):

description:

by eterte | at 2019-11-11 15:48:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Bad IE7: hi

result with twig: {{ xss.xss | escape }}:

<strong>Bad IE7:</strong> <a style="xss:e&#92;&#48;&#48;&#55;&#56;pression(window.x?0:(alert(/XSS/),window.x=1));">hi</a><br />

keyword(s):

description:

by prova | at 2019-11-11 15:47:05

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" alt="img"/>

keyword(s):

description:

by as | at 2019-11-09 14:01:54

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

test

result with twig: {{ xss.xss | escape }}:

test <script>window.alert('hej');</script>

keyword(s):

description: test

by as | at 2019-11-09 14:00:54

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

='prompt(/OPENBUGBOUNTY/)'style='position:absolute;width:100%;height:100%;top:0;left:0;

result with twig: {{ xss.xss | escape }}:

onmouseover%3d'prompt(/OPENBUGBOUNTY/)'style%3d'position%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b

keyword(s):

description:

by test | at 2019-11-08 10:38:13

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

='prompt(/OPENBUGBOUNTY/)'style='position:absolute;width:100%;height:100%;top:0;left:0;

result with twig: {{ xss.xss | escape }}:

onmouseover%3d'prompt(/OPENBUGBOUNTY/)'style%3d'position%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b

keyword(s): gdfgdfgdfg

description: gdfgdfg

by foo | at 2019-11-08 10:37:05

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

xss

result with twig: {{ xss.xss | escape }}:

xss

keyword(s): xss

description: xss

by abdul | at 2019-11-07 18:36:59

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Having related backlinks is a must in today`s SEO world So, we are able to provide you with this great service at a mere price https://www.monkeydigital.co/product/related-backlinks/ You will receive full report within 15 days 500 to 1000 related backlinks will be provided in this service thanks and regards Monkey Digital Team support@monkeydigital.co

result with twig: {{ xss.xss | escape }}:

Having related backlinks is a must in today`s SEO world So, we are able to provide you with this great service at a mere price https://www.monkeydigital.co/product/related-backlinks/ You will receive full report within 15 days 500 to 1000 related backlinks will be provided in this service thanks and regards Monkey Digital Team support@monkeydigital.co

keyword(s):

description: Having related backlinks is a must in today`s SEO world So, we are able to provide you with this great service at a mere price https://www.monkeydigital.co/product/related-backlinks/ You will receive full report within 15 days 500 to 1000 related backlinks will be provided in this service thanks and regards Monkey Digital Team support@monkeydigital.co

by Danilo Walsh | at 2019-11-06 22:40:08

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert(document.cookie);</script>

keyword(s):

description: test

by martin | at 2019-11-05 16:49:15

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

th (1).jpg

result with twig: {{ xss.xss | escape }}:

<p><img src="/upload/image/20191101/1572590446397892.jpg" title="1572590446397892.jpg" alt="th (1).jpg"/>

keyword(s): 房贷首付

description: 大师傅但是

by 房贷首付 | at 2019-11-01 07:48:05

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hello, i try to your site

result with twig: {{ xss.xss | escape }}:

Hello, i try to <script>alert('Hack');</script> your site

keyword(s): sss

description: sss

by ss | at 2019-10-30 19:33:35

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

{{ xss.xss | escape }}:

result with twig: {{ xss.xss | escape }}:

{{ xss.xss | escape }}:

keyword(s): iii

description: ijoi

by lkm | at 2019-10-30 17:59:55

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hello, i try to

result with twig: {{ xss.xss | escape }}:

Hello, i try to <script>alert('Hack');</script>

keyword(s): iii

description: ijoi

by k | at 2019-10-30 17:58:50

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hello, i try to your site

result with twig: {{ xss.xss | escape }}:

Hello, i try to <script>alert('Hack');</script> your site

keyword(s):

description: k

by k | at 2019-10-30 17:57:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hello, i try to your site

result with twig: {{ xss.xss | escape }}:

Hello, i try to <script>alert('Hack');</script> your site

keyword(s): b

description: c

by a | at 2019-10-30 01:57:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert(''123123)</script>

keyword(s): w

description: few

by fwef | at 2019-10-28 12:00:39

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<?php echo 'test';?>

result with twig: {{ xss.xss | escape }}:

<?php echo 'test';?>

keyword(s): qwdqwdqw

description: dqwdqwdqw

by aadwdqwqwd | at 2019-10-28 11:58:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

alert('teste >')

result with twig: {{ xss.xss | escape }}:

<script type=\"javascript\">alert('teste >')</script>

keyword(s):

description:

by 1 | at 2019-10-25 20:30:13

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

aaaaa<>7s

result with twig: {{ xss.xss | escape }}:

aaaaa<>7s

keyword(s): aaaaa<>7s

description: aaaaa<>7s

by aaaaaaa | at 2019-10-24 11:30:36

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<svg/></svg>

result with twig: {{ xss.xss | escape }}:

<svg/onload=alert(1)></svg>

keyword(s): <svg/></svg>

description: <svg/></svg>

by <svg/></svg> | at 2019-10-24 11:28:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<svg/></svg>

result with twig: {{ xss.xss | escape }}:

<svg/onload=alert(1)></svg>

keyword(s): b

description: <svg/></svg>

by a | at 2019-10-23 09:04:05

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert(1)</script>

keyword(s): a

description:

by a | at 2019-10-23 09:03:44

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

hi there Get our 1 time SEO max Package, which covers only manual backlinks creation, done naturally during 30 days period. Receive full report and a safe rank improvement with the guarantee of never harming or losing any of your ranks after the climb is performed. See full details of our great plan here https://monkeydigital.co/product/seo-max-package/ Detailed activities of all thats included Start increasing your organic visibility with us today Apply this 25% coupon on the BASKET page 25XDISC thanks and regards Monkey Digital Team support@monkeydigital.co

result with twig: {{ xss.xss | escape }}:

hi there Get our 1 time SEO max Package, which covers only manual backlinks creation, done naturally during 30 days period. Receive full report and a safe rank improvement with the guarantee of never harming or losing any of your ranks after the climb is performed. See full details of our great plan here https://monkeydigital.co/product/seo-max-package/ Detailed activities of all thats included Start increasing your organic visibility with us today Apply this 25% coupon on the BASKET page 25XDISC thanks and regards Monkey Digital Team support@monkeydigital.co

keyword(s):

description: hi there Get our 1 time SEO max Package, which covers only manual backlinks creation, done naturally during 30 days period. Receive full report and a safe rank improvement with the guarantee of never harming or losing any of your ranks after the climb is performed. See full details of our great plan here https://monkeydigital.co/product/seo-max-package/ Detailed activities of all thats included Start increasing your organic visibility with us today Apply this 25% coupon on the BASKET page 25XDISC thanks and regards Monkey Digital Team support@monkeydigital.co

by Denis Marquardt | at 2019-10-21 04:51:13

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

jddh

result with twig: {{ xss.xss | escape }}:

jddh

keyword(s): Keywords

description: sahdkjsadhsakjdh

by Dunny | at 2019-10-20 23:12:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Mehr Info, telefonische Beratung auf: http://eufseu.de/ Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Mehr Info, telefonische Beratung auf: http://eufseu.de/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

result with twig: {{ xss.xss | escape }}:

MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Mehr Info, telefonische Beratung auf: http://eufseu.de/ Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Mehr Info, telefonische Beratung auf: http://eufseu.de/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

keyword(s):

description: MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Mehr Info, telefonische Beratung auf: http://eufseu.de/ Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Mehr Info, telefonische Beratung auf: http://eufseu.de/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

by Pfeffer | at 2019-10-16 00:17:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

alert("mohammed")

result with twig: {{ xss.xss | escape }}:

<scirpt>alert("mohammed")<script>

keyword(s): m

description: ok

by hello | at 2019-10-15 05:55:52

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

result with twig: {{ xss.xss | escape }}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

keyword(s):

description: Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

by Imke Buchner | at 2019-10-14 13:58:16

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<hey>

keyword(s):

description:

by <hey> | at 2019-10-14 03:14:30

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

dasdasdsad

result with twig: {{ xss.xss | escape }}:

dasdasdsad

keyword(s): dasdasdas

description: asdasdasd

by sadas | at 2019-10-11 15:05:09

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

result with twig: {{ xss.xss | escape }}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

keyword(s):

description: Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://foli88.space/ Mit freundlichen Grüßen

by Karl | at 2019-10-09 09:32:30

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" alt="img"/>

keyword(s): asd

description: asd

by asd | at 2019-10-04 14:25:42

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<;STYLE>;li {list-style-image: url(";alert('XSS')";);}<;/STYLE>;<;UL>;<;LI>;XSS

result with twig: {{ xss.xss | escape }}:

<;STYLE>;li {list-style-image: url(";javascript:alert(&#39;XSS&#39;)";);}<;/STYLE>;<;UL>;<;LI>;XSS

keyword(s): Test

description: Test

by Test | at 2019-10-04 14:24:49

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Finally there is a SEO Service that has given proven results and that is backed by the customers! Our SERP Booster is a powerful, diversified activities linking structure which we have designed to create a naturally and manual link building SEO strategy. Read more details about our service https://monkeydigital.co/product/serp-booster/ Thanks and regards Mike monkeydigital.co@gmail.com

result with twig: {{ xss.xss | escape }}:

Finally there is a SEO Service that has given proven results and that is backed by the customers! Our SERP Booster is a powerful, diversified activities linking structure which we have designed to create a naturally and manual link building SEO strategy. Read more details about our service https://monkeydigital.co/product/serp-booster/ Thanks and regards Mike monkeydigital.co@gmail.com

keyword(s):

description: Finally there is a SEO Service that has given proven results and that is backed by the customers! Our SERP Booster is a powerful, diversified activities linking structure which we have designed to create a naturally and manual link building SEO strategy. Read more details about our service https://monkeydigital.co/product/serp-booster/ Thanks and regards Mike monkeydigital.co@gmail.com

by Alana Leahy | at 2019-10-03 15:36:20

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

gdhfdhgfdhfhgf

result with twig: {{ xss.xss | escape }}:

gdhfdhgfdhfhgf

keyword(s):

description:

by hgkjgkjhgk | at 2019-09-30 18:12:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

sdf

result with twig: {{ xss.xss | escape }}:

sdf

keyword(s): ẻt

description: ẻt

by ẻt | at 2019-09-30 12:27:33

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

as

result with twig: {{ xss.xss | escape }}:

<a href="asd">as</a>

keyword(s): фывфы

description: asd

by выа | at 2019-09-26 19:02:32

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

чсмчсмчсм

result with twig: {{ xss.xss | escape }}:

чсмчсмчсм

keyword(s): фывфы

description: фыв

by выа | at 2019-09-26 19:01:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" alt="img"/>

keyword(s): dd

description: dd

by dd | at 2019-09-23 21:59:15

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

yyy

result with twig: {{ xss.xss | escape }}:

yyy

keyword(s): lol

description: test

by marc | at 2019-09-23 21:58:30

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

result with twig: {{ xss.xss | escape }}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

keyword(s):

description: Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Kartons. Maxibriefkartons, Umzugskartons. Klebebänder. Acryl. Solvent. Eco-Kautschuk. Bau Folie. Estrichfolie. Gartenfolie. Malerfolie. Abdeckfolie. Schutzfolie. Luftpolsterfolie. Schaumfolie. Alu-Folie, Alu-Luftpolsterfolie. Alu-Schaumfolie. Panzerband. Duct Tape. Papierklebeband. Malerkrepp. Gartenvlies. Doppelklebeband. Teppichband. Schaumklebeband. Alu-Band, Alu-Klebeband. Arbeitshandschuhe und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

by Sofia von Hohenegg | at 2019-09-20 13:22:30

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" width="250" alt="img"/> <script>alert(1)</script>

keyword(s): asdasd

description: asdasd

by adasd | at 2019-09-20 11:40:17

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" width="250" alt="img"/>

keyword(s): asdasd

description: asdasd

by asdasd | at 2019-09-20 11:38:08

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

img

result with twig: {{ xss.xss | escape }}:

<img src="https://images.unsplash.com/photo-1526614180703-827d23e7c8f2?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=crop&w=975&q=80" alt="img"/>

keyword(s): aSas

description: sSsa

by asdad | at 2019-09-20 11:37:40

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<img src="http://sssss.pl"/>

keyword(s): asdasd

description: asdasd

by asdasd | at 2019-09-20 08:51:01

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

alert('test');

result with twig: {{ xss.xss | escape }}:

alert%28%27test%27%29%3B

keyword(s): z

description: testing

by 73214 | at 2019-09-19 21:52:07

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

result with twig: {{ xss.xss | escape }}:

Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

keyword(s):

description: Hochwertige Waren vom Produzent. Fabrikverkauf. Versand am gleichen Tag. Bis 95 % günstiger als auf dem Markt. Müllsäcke, Abfallsäcke alle Sorten. Gewebesäcke. Raschelsäcke. Spänesäcke. Umreifungsband. Klemmen, Hülsen, Spanner. Umreifungszange, Umreifungsschweisser. Reifentüten mit und ohne Logo. Schwarz, weiß. Stretch Folie. Maschinenstretchfolie. Ministretchfolie. Kantenschutzleisten, Palettenhauben. Gartenvlies und Vieles mehr. Info auf: http://folmaxx.pw/ Mit freundlichen Grüßen

by Seeger | at 2019-09-17 20:58:13

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('aaa');</script>

keyword(s):

description:

by | at 2019-09-16 08:18:00

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('aaa');</script>

keyword(s): b

description: b

by b | at 2019-09-15 15:05:51

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Hello

result with twig: {{ xss.xss | escape }}:

<a href="www.charfun.com">Hello</a>

keyword(s): a

description: a

by a | at 2019-09-15 15:05:10

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert()</script>

keyword(s): sdfdsa

description: sadfdsaf

by sadfa | at 2019-09-13 09:02:24

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

asdf

result with twig: {{ xss.xss | escape }}:

asdf

keyword(s): sadfdsaf

description: safdas

by asdfdsaf | at 2019-09-13 09:01:55

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

saddasds dassad

result with twig: {{ xss.xss | escape }}:

saddasds dassad

keyword(s): saddasds dassad

description: saddasds dassad

by saddasds dassad | at 2019-09-10 22:38:41

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

sfdsfd

result with twig: {{ xss.xss | escape }}:

sfdsfd

keyword(s): sdfsdf

description: sdfsdf

by sfdfdsdfsdf | at 2019-09-10 22:38:19

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

sad

result with twig: {{ xss.xss | escape }}:

sad

keyword(s):

description:

by sad | at 2019-09-10 13:24:08

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

ytgsgf

result with twig: {{ xss.xss | escape }}:

<div>ytgsgf</div>

keyword(s): Jsbsh

description: Snsjs

by Bdjd | at 2019-09-09 19:17:08

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<span></span>

keyword(s): Gshs

description: Nsbz

by Jsgs | at 2019-09-09 19:15:46

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

ᶢ

result with twig: {{ xss.xss | escape }}:

<span>&#7586;</span>

keyword(s): 09968

description: Test

by Testing002 | at 2019-09-09 19:13:29

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

ᶢ

result with twig: {{ xss.xss | escape }}:

<span>&#7586;</script>

keyword(s): 09968

description: Testing for xss

by Testing001 | at 2019-09-09 19:10:31

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script></script>

keyword(s): Gdjg

description: Gfjg

by Hfj | at 2019-09-09 19:07:20

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

saf

result with twig: {{ xss.xss | escape }}:

saf

keyword(s): sadf

description: sdf

by asdf | at 2019-09-08 10:26:12

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<?php echo "More" ?>

result with twig: {{ xss.xss | escape }}:

<script>window.alert("Wow");</script> <?php echo "More" ?>

keyword(s): Love

description: Love for computer information security

by Ssekiziyivu Godfrey | at 2019-09-07 22:30:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

&?

result with twig: {{ xss.xss | escape }}:

&?

keyword(s): Love

description: Love for computer security

by Ssekiziyivu Godfrey | at 2019-09-07 22:27:49

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<scr<script>ipt>alert("hello");</scr</script>ipt>

keyword(s): any

description: Test

by test | at 2019-09-07 12:33:03

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

qqq

result with twig: {{ xss.xss | escape }}:

qqq

keyword(s):

description: qqqq

by qqqq | at 2019-09-06 18:51:53

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<svg />

result with twig: {{ xss.xss | escape }}:

<svg onload='alert("dff")'/>

keyword(s): effefe

description: <svg />

by fer | at 2019-09-05 15:30:56

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<?php echo "sdfgdsfg"; ?>

result with twig: {{ xss.xss | escape }}:

<?php echo "sdfgdsfg"; ?>

keyword(s): dfh

description: dfhfdg

by sdf | at 2019-09-04 16:10:03

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

pop

result with twig: {{ xss.xss | escape }}:

pop <script></script>

keyword(s): dfh

description: dfg

by fdgh | at 2019-09-04 12:05:42

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

dfghdfghf

result with twig: {{ xss.xss | escape }}:

dfghdfghf<img src="#" />

keyword(s): dfh

description: dfghdfh

by dfh | at 2019-09-04 12:04:27

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<img src="#" />

keyword(s): sdfg

description: sdfg

by kh | at 2019-09-04 12:03:56

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert("khush");</script>

keyword(s): tes

description: sdfgfdg

by khush | at 2019-09-04 12:02:40

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert("sdfg");</script>

keyword(s): fgh

description: dfgh

by | at 2019-09-04 12:01:29

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

sdfsdf

result with twig: {{ xss.xss | escape }}:

sdfsdf

keyword(s):

description:

by vdc | at 2019-09-04 09:17:15

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

شسی

result with twig: {{ xss.xss | escape }}:

شسی

keyword(s): شسی

description: شسی

by سی | at 2019-09-03 23:49:56

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<div/onanimationend="alert(1)"/style="animation:a">

keyword(s): test

description:

by test | at 2019-09-02 14:58:34

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert(1)</script>

keyword(s): sssssss

description: asdasda

by aaaa | at 2019-09-02 13:23:11

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script> alert(12312313213) </script>

keyword(s): dfgd

description: fgdfgd

by dfgdfg | at 2019-09-02 13:20:13

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script> alert(1) </script>

keyword(s): eryerye

description: ryeryerye

by yeyery | at 2019-09-02 13:19:45

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script> alert(1) </script>

keyword(s): 2

description: 3

by 1 | at 2019-09-01 15:08:51

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

ddd

result with twig: {{ xss.xss | escape }}:

ddd

keyword(s): ddd

description: ddd

by dd | at 2019-09-01 15:08:12

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: www.mpu77.com Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: http://eufs.pw/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

result with twig: {{ xss.xss | escape }}:

MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: www.mpu77.com Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: http://eufs.pw/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

keyword(s):

description: MPU ist für Sie kein Muss mehr! Ohne Schikane zum Führerschein! Nutzen Sie Ihr Recht auf EU-Führerschein, sowie schon Tausende deutsche Bürger gemacht haben. Idiotentest – nein, danke! Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: www.mpu77.com Außerdem: Umtausch „Alle nicht EU-Führerscheine“ gegen einen „EU-Führerschein“. EU driving license for all. Anfrage E-Mail: cedeco99@gmail.com Mehr Info, telefonische Beratung auf: http://eufs.pw/ Peneta GmbH, Siemensstraße. 44, 12489 Berlin.

by Uhl | at 2019-08-31 08:44:12

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('hi')</script>

keyword(s): aa

description: aa

by aaa | at 2019-08-30 08:45:16

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

I am fine

result with twig: {{ xss.xss | escape }}:

<div style="text-align: justify" ONCLICK="alert('test')">I am fine</div>

keyword(s):

description:

by test | at 2019-08-29 22:31:25

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

I am fine

result with twig: {{ xss.xss | escape }}:

<div style="text-align: justify">I am fine</div>

keyword(s):

description:

by TEST | at 2019-08-29 22:30:21

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<SCRIPT SRC=http://xss.rocks/xss.js?< B >

keyword(s): s

description: s

by s | at 2019-08-28 11:10:23

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('hi')</script>

keyword(s): dhtdu

description: dtujtdu

by tjntfj | at 2019-08-26 09:19:22

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

asssssssssssssssssss

result with twig: {{ xss.xss | escape }}:

asssssssssssssssssss

keyword(s): asdas

description: asdasdasdasdasd

by the"=T84s(9831)" | at 2019-08-23 22:53:49

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

the"=T84s(9831)"

result with twig: {{ xss.xss | escape }}:

the"onmouseover=T84s(9831)"

keyword(s): nasil

description: kardes

by yarragim | at 2019-08-23 22:52:45

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>test('test');</script>

keyword(s):

description:

by adasda | at 2019-08-22 04:04:05

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

你早

result with twig: {{ xss.xss | escape }}:

你早

keyword(s):

description:

by 你早 | at 2019-08-22 04:03:21

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

testprofessional

result with twig: {{ xss.xss | escape }}:

<font color="#ffFF00">testprofessional</font>

keyword(s):

description:

by test | at 2019-08-20 13:04:42

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

I am fine

result with twig: {{ xss.xss | escape }}:

<div><s>I am fine</s></div>

keyword(s):

description:

by test | at 2019-08-20 13:01:20

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

I am fine

result with twig: {{ xss.xss | escape }}:

<div style="color: red;">I am fine</div>

keyword(s):

description:

by test | at 2019-08-20 12:59:12

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

I am fine

result with twig: {{ xss.xss | escape }}:

<div style="text-align: justify">I am fine</div>

keyword(s):

description:

by test | at 2019-08-20 12:55:38

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

Nonstop

result with twig: {{ xss.xss | escape }}:

Nonstop

keyword(s):

description:

by Nonstop | at 2019-08-19 16:13:33

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('Il y a une faille XSS')</script>

keyword(s):

description:

by | at 2019-08-16 19:48:26

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

result with twig: {{ xss.xss | escape }}:

<script>alert('Il y a une faille XSS')</script>

keyword(s):

description:

by | at 2019-08-16 16:12:38

result with twig: {% xss_clean %}{{ xss.xss | raw }}{% end_xss_clean %}:

<svg><p><textarea><img ><>

result with twig: {{ xss.xss | escape }}:

<svg><p><textarea><img src="</textarea><img src=x onerror=1//">

keyword(s): foo,bar

description: test from DOMPurify

by Lars | at 2019-08-15 01:27:47

BY LARS MOELLEKEN WITH HATE IN 2015