| 6dd74de | 1 | const div = parent.document.createElement('div'); | ||
| 6dd74de | 2 | div.id = 'the-malware'; | ||
| 6dd74de | 3 | div.className = 'malware'; | ||
| 6dd74de | 4 | div.innerHTML = 'XSS Succeeded'; | ||
| 6dd74de | 5 | parent.document.getElementsByTagName('body')[0].appendChild(div); | ||
| 6dd74de | 6 | throw new Error('XSS Succeeded'); |