12Eyl
Is there any way to break the HTML attributes without using single/double quotes?
I have the following code,
<li data-type="test" title="?"> test </li>
Following values were Not allowed
<>&*#%\'"=
My goal here is to get a javascript popup to appear. is there a way to make an alert popup?
Ex
<li data-type="test" title="" onmouseover="alert(1)//" ""> test </li>
