> For the complete documentation index, see [llms.txt](https://sayonara.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sayonara.gitbook.io/writeups/portswigger/xss.md).

# XSS

- [1) Reflected XSS into HTML context with nothing encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/1-reflected-xss-into-html-context-with-nothing-encoded.md)
- [2) Stored XSS into HTML context with nothing encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/2-stored-xss-into-html-context-with-nothing-encoded.md)
- [3) DOM XSS in document.write sink using source location.search](https://sayonara.gitbook.io/writeups/portswigger/xss/3-dom-xss-in-document.write-sink-using-source-location.search.md)
- [4) DOM XSS in innerHTML sink using source location.search](https://sayonara.gitbook.io/writeups/portswigger/xss/4-dom-xss-in-innerhtml-sink-using-source-location.search.md)
- [5) DOM XSS in jQuery anchor href attribute sink using location.search source](https://sayonara.gitbook.io/writeups/portswigger/xss/5-dom-xss-in-jquery-anchor-href-attribute-sink-using-location.search-source.md)
- [6) DOM XSS in jQuery selector sink using a hashchange event](https://sayonara.gitbook.io/writeups/portswigger/xss/6-dom-xss-in-jquery-selector-sink-using-a-hashchange-event.md)
- [7) Reflected XSS into attribute with angle brackets HTML-encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/7-reflected-xss-into-attribute-with-angle-brackets-html-encoded.md)
- [8) Stored XSS into anchor href attribute with double quotes HTML-encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/8-stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded.md)
- [9) Reflected XSS into a JavaScript string with angle brackets HTML encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/9-reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded.md)
- [10) DOM XSS in document.write sink using source location.search inside a select element](https://sayonara.gitbook.io/writeups/portswigger/xss/10-dom-xss-in-document.write-sink-using-source-location.search-inside-a-select-element.md)
- [11) DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded](https://sayonara.gitbook.io/writeups/portswigger/xss/11-dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded.md)
- [12) Reflected DOM XSS](https://sayonara.gitbook.io/writeups/portswigger/xss/12-reflected-dom-xss.md)
- [13) Stored DOM XSS](https://sayonara.gitbook.io/writeups/portswigger/xss/13-stored-dom-xss.md)
- [14) Reflected XSS into HTML context with most tags and attributes blocked](https://sayonara.gitbook.io/writeups/portswigger/xss/14-reflected-xss-into-html-context-with-most-tags-and-attributes-blocked.md)
- [15) Reflected XSS into HTML context with all tags blocked except custom ones](https://sayonara.gitbook.io/writeups/portswigger/xss/15-reflected-xss-into-html-context-with-all-tags-blocked-except-custom-ones.md)
- [16) Reflected XSS with some SVG markup allowed](https://sayonara.gitbook.io/writeups/portswigger/xss/16-reflected-xss-with-some-svg-markup-allowed.md)
- [17) Reflected XSS in canonical link tag](https://sayonara.gitbook.io/writeups/portswigger/xss/17-reflected-xss-in-canonical-link-tag.md)
- [18) Reflected XSS into a JavaScript string with single quote and backslash escaped](https://sayonara.gitbook.io/writeups/portswigger/xss/18-reflected-xss-into-a-javascript-string-with-single-quote-and-backslash-escaped.md)
- [19) Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped](https://sayonara.gitbook.io/writeups/portswigger/xss/19-reflected-xss-into-a-javascript-string-with-angle-brackets-and-double-quotes-html-encoded-and-sin.md)
- [20) Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped](https://sayonara.gitbook.io/writeups/portswigger/xss/20-stored-xss-into-onclick-event-with-angle-brackets-and-double-quotes-html-encoded-and-single-quote.md)
- [21) Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped](https://sayonara.gitbook.io/writeups/portswigger/xss/21-reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-backslash-and-back.md)
- [22) Exploiting cross-site scripting to steal cookies](https://sayonara.gitbook.io/writeups/portswigger/xss/22-exploiting-cross-site-scripting-to-steal-cookies.md)
- [23) Exploiting cross-site scripting to capture passwords](https://sayonara.gitbook.io/writeups/portswigger/xss/23-exploiting-cross-site-scripting-to-capture-passwords.md)