C7 href javascript: URI

Your profile link: visit

The whole href is yours. Angle brackets are not needed - use a scheme: javascript:alert(document.domain) (click the link).

RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only