e.g
<form action='javascript:alert("Hi")'>
   <a href='javascript:alert("Yo")'>Click me</a>
  <button type="submit">or me</button>
</form>

Both alerts are undetected

Reply via email to