cspshivam/playground
XSS Level 8 / 10 Medium
← All labs

Sink — javascript: URI

Your input becomes a link target. Convert the navigation into execution.

Redirect notice

You're about to leave. Set the "continue" destination, then click the link.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.