HackPadModeHTMLMXSSCharsetBig5EUC-JPEUC-KRGBKIBM866ISO-2022-JPISO-8859-10ISO-8859-13ISO-8859-14ISO-8859-15ISO-8859-16ISO-8859-2ISO-8859-3ISO-8859-4ISO-8859-5ISO-8859-6ISO-8859-7ISO-8859-8ISO-8859-8-IKOI8-RKOI8-UShift_JISUTF-16BEUTF-16LEUTF-8gb18030macintoshwindows-1250windows-1251windows-1252windows-1253windows-1254windows-1255windows-1256windows-1257windows-1258windows-874x-mac-cyrillicx-user-definedJS Input:0 0HTML Input:<div id=x></div> <div id=y></div> <script> document.getElementById('x').innerHTML = '<script>alert("Fails")<\/script>'; document.getElementById('y').innerHTML = '<img src onerror=alert("Works")>'; </script>Auto execute?CSP:JS Output:0 0HTML Output:ClearSave«←Jump to historyResetReset history (0 of 0)→»Execute (Ctl+Enter)Error!
