← All labs
XSS Level 8 / 10 Medium

URL — javascript: Scheme

Your input becomes the target of a link. Turn the link into code execution.

Redirect notice

You're about to leave. Set the "continue" destination, then click the link.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.