XSS Polyglots
A polyglot is a payload that can be used in more than one context and still be treated as valid data. To learn more about polyglots check out this talk.
Installation
$ npm install xss-polyglots --save-dev
Usage
The xss-polyglots package exports a function that returns an array of payloads.
import getPayloads from 'xss-polyglots';
let xssPayloads = getPayloads();By default, these payloads will call console.error whenever they can be executed. Otherwise you can specify which
function will be called as the first argument of the getPayloads function.
import getPayloads from 'xss-polyglots';
let xssPayloads = getPayloads('myGlobalFunction');License
MIT