Alert() is dead, long live XSS : print(1) is the next POC there

How many years we are seeing the alert(1) POC right? Seems like it is going to get dead. Google Chrome has decided to tackle this by disabling alert for cross-domain iframe.

After Chrome 92 , no alert() based XSS POC won’t be there. A simple easy, alternative for alert() is print()

Reference : alert() is dead, long live print() | PortSwigger Research

Please note, we can still use alert if there is no iframe involved.

1 Like