Hacker News Reader

Comment by instakill | Hacker News Reader

What is lvl2's answer? I'm trying:

My solution was:

     <img src="foo" onMouseOver="alert(33);"

Interesting to see so many people used onError instead.

img src='garbage' onerror='script' is gauranteed to auto execute, where mouseover requires the user to mouse over the element.

I used just onclick

onerror= is usually the one used in CTF and XSS examples!

One of the hints says you can use onError()

I'm sure that's where most people are getting it from.

just onerror="alert(1)" :)

I did <a onclick="alert('hakz');">click</a>

Me too, except I used a button tag. Feels like cheating though.