Wrapper_HTMLDataUrl

Represent an HTML payload in data: url format

Methods


    
    Wrapper.js:458


    
    Wrapper.js:470

Transform any html data url into a <iframe src> payload.
The XSS will trigger on about:blank

const p = Payload.new().eval(() => alert(1))
const w = Wrapper.new().script().dataUrl().iframe()

document.body.innerHTML = w.wrap(p)


    
    Wrapper.js:485

Transform any html data url into a window.open payload.
The XSS will trigger on about:blank

const p = Payload.new().eval(() => alert(1))
const w = Wrapper.new().script().dataUrl().windowOpen()

document.body.innerHTML = w.wrap(p)


    
    Wrapper.js:92

Wrap a payload or a string and return it a as string

const p = Payload.new().eval(() => alert(1))
const w = Wrapper.new()
const code = w.wrap(p)

eval(code)

Inherited From:

Name	Type	Description
`payload`	Payload \| String	Payload to wrap