cspshivam/playground
XSS Level 6 / 10 Medium
← All labs

Filter — Tag Stripping

The app deletes the script tag. Execute without ever using it.

About-me box

Our filter removes <script> tags, so this box is "safe". Right?

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.