Skip to content
Better HN
Top
Best
Ask
Show
New
Jobs
Search
⌘K
0 points
jdnier
8y ago
0 comments
Save
Share
Works in Firefox, not in Chrome (at least on MacOS).
0 comments
6 comments · 3 top-level
top
newest
oldest
yorwba
8y ago
· 1 in thread
What about
data:text/html,<script>alert(2+2)</script> ?
ConfucianNardin
8y ago
Works in both Chrome and Firefox.
tomc1985
8y ago
· 1 in thread
Doesn't work in Chrome (edit: or Firefox for that matter) for Windows either... that's a shame. Abusing javascript: is a really useful trick for lots of little hacks.
striking
8y ago
It's also an attack vector for hacks. You can enable it on some browsers if you please, but having it off by default is sensible...
johnhenry
8y ago
· 1 in thread
Works if you type it out. If you paste it, the "javascript:" part will be omitted.
abhinickz
8y ago
Above works even if you paste it.
j
/
k
navigate · click thread line to collapse