Research Article

GAXSS: Effective Payload Generation Method to Detect XSS Vulnerabilities Based on Genetic Algorithm

Table 8

Coding confusion.

Encoding typeExample

HTML encoding<svg onload = alert(1)>
Unicode encoding<svg onload = \ u0061\ u006c\ u0065\ u0072\ u0074(1)>
URL encoding%3Csvg%20onload%3Dalert(1)%3E
Base64<iframe src = data:text/html; base64, PHN2ZyBvbmxvYWQ9YWxlcnQoMSk+>