diff --git a/Fuzzing/XML_FUZZ b/Fuzzing/XML_FUZZ index c2223acc242..1aaf47f3ef8 100644 --- a/Fuzzing/XML_FUZZ +++ b/Fuzzing/XML_FUZZ @@ -11,6 +11,11 @@ ]> ]> +"]]>" +"cript:alert('XSS')"">" +"" +"XSS" +','')); phpinfo(); exit;/* ## Element and Attrib Values @@ -48,3 +53,5 @@ false {{Tnn96}} {= Tnn96} {{= Tnn96}} +count(/child::node()) +x' or name()='username' or 'x'='y