Some inputs to check for XSS issues

By Flavio Copes

A reference list of XSS payloads and input strings you can use to test a web app for cross-site scripting vulnerabilities when explaining how XSS works.

Some inputs to check for XSS issues, just for reference when I explain XSS and how it can be dangerous

• <script>alert('XSS');</script>
• '"--><img src=x onerror=alert('XSS')>
• '><script>alert(0)</script>