[Skidy]

<img src="/" onerror=alert(1);>

This works on a website, on internet explorer though not google chrome. Can anyone encode this so that it bypasses the chrome XSS filter and works on Chrome?

I am willing to give a small reward if you can get it to work. (If this is in the wrong section please move it).

[Beladonis]

Try this : http://blog.securitee.org/?p=37

[Skidy]

Try this : http://blog.securitee.org/?p=37

Been sent that so many times, its outdated and doesn't work

[cheatson]

Been sent that so many times, its outdated and doesn't work

Bypasses pop up now and again on blogs but the shelf-life will be short as either the blog poster or audience will report it. I even posted one I found back in late 2013 and got response: "we do not generally reward XSSauditor bugs, because XSSAuditor is a best-effort line of defense when the flaw is in the website." The auditor code is open-source, so go inspect it and find your own! (then keep it to yourself ! 🤭)