[8220347]

The WAF blocks the following input:

Code

<b onmouseover=
<script> or </script>
javascript:
<body [b]onload=[/b]

I have managed to achieve HTML injection with the following allowed input:

<b>test</b>
<a href="google.com">test</a>


Any ideas? thanks

[Pr3nK]

The WAF blocks the following input:

Code

<b onmouseover=
<script> or </script>
javascript:
<body [b]onload=[/b]

I have managed to achieve HTML injection with the following allowed input:

<b>test</b>
<a href="google.com">test</a>


Any ideas? thanks

Can I take a look at the website? Send it to me via PM, I'll help you

['Cynical]

Check this shit out:
https://www.owasp.org/index.php/XSS_Filt...heat_Sheet