← All labs
XSS Level 6 / 10 Medium

Filter — Tag Blacklist

The app strips the <script> tag. Achieve execution without it.

About-me box

Our filter removes <script> tags, so this box is "safe". Right?

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.