XSS Polyglots

A polyglot is a payload that can be used in more than one context and still be treated as valid data. To learn more about polyglots check out this talk.

Installation

$ npm install xss-polyglots --save-dev

Usage

The xss-polyglots package exports a function that returns an array of payloads.

import getPayloads from 'xss-polyglots';
 
let xssPayloads = getPayloads();

By default, these payloads will call console.error whenever they can be executed. Otherwise you can specify which function will be called as the first argument of the getPayloads function.

import getPayloads from 'xss-polyglots';
 
let xssPayloads = getPayloads('myGlobalFunction');

License

MIT