Stored XSS Lab: Plant a Comment That Runs for Every Visitor

DevBlog lets readers leave comments, saves them, and shows them to every visitor. That is what comments are for. The problem is how it shows them: as raw HTML. Write a comment that contains markup instead of words, and the site will serve your code to every person who reads the post, without you sending a single link. Lab at a glance: Beginner · 60 XP · about 10 minutes · runs in your browser, no signup or setup. Try…

Read full article →