Lazy loading images + Scroll to Text Fragment XSLeak.
With Water Paddler.
We can upload images, make "notes" containing this image and a title, and share this "notes" with an authed bot displaying the flag in its footer.
| <div style="position:absolute;top:-999px;left:-999px"> | |
| <svg | |
| id="effectSvg" | |
| width="200" | |
| height="200" | |
| viewBox="0 0 200 200" | |
| xmlns="http://www.w3.org/2000/svg"> | |
| <filter id="displacementFilter4"> |
Lazy loading images + Scroll to Text Fragment XSLeak.
With Water Paddler.
We can upload images, make "notes" containing this image and a title, and share this "notes" with an authed bot displaying the flag in its footer.
| <!-- Sentry.js Config --> | |
| <script src="https://js.sentry-cdn.com/{{ENV['SENTRY_PUBLIC_DSN']}}.min.js" type="text/javascript"></script> | |
| <script type="text/javascript"> | |
| // custom functions to handle errors in JS. | |
| function handleRouteError(err) { | |
| Sentry.captureException(err); | |
| } | |
| function errorHandler(error, data, level) { | |
| level = level || 'info'; |
The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.
This means you have the following choices:
import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.await import(…) from CommonJS instead of require(…).| class EventEmitter { | |
| constructor() { | |
| this.target = new EventTarget(); | |
| } | |
| on(eventName, listener) { | |
| return this.target.addEventListener(eventName, listener); | |
| } | |
| once(eventName, listener) { | |
| return this.target.addEventListener(eventName, listener, { once: true }); | |
| } |
Sometimes a programming language has a "strict mode" to restrict unsafe constructs. E.g., Perl has use strict, Javascript has "use strict", and Visual Basic has Option Strict. But what about bash? Well, bash doesn't have a strict mode as such, but it does have an unofficial strict mode:
set -euo pipefail
set -e
https://icons.duckduckgo.com/ip2/{hostname}.icohttps://www.google.com/s2/favicons?domain_url={hostname}https://favicon.yandex.net/favicon/{hostname1}/{hostname2}/https://f1.allesedv.com/16/{hostname}http://grab-favicons.herokuapp.com/api/v1/grab-favicons/?url={hostname}https://besticon-demo.herokuapp.com/icon?url={hostname}&size=80..120..200http://favicongrabber.com/service-api-referenceFor pip < 10.0.1:
import pip
from subprocess import call
packages = [dist.project_name for dist in pip.get_installed_distributions()]
for package in packages:
try:
call("pip install --upgrade " + package, shell=True)| # <type>: <subject> (Max 50 char, Why is this change necessary?) | |
| # |<---- Using a Maximum Of 50 Characters ---->| | |
| # |<---- Try To Limit Each Line to a Maximum Of 72 Characters ---->| | |
| # Explain how the commit addresses the issue | |
| # IMPORTANT!! Describe any side effects of the change. | |
| # Provide links or keys to any relevant tickets, articles or other resources | |
| # Examples: "Jira issue [ABC-123]" or "Closes Github issue #123" |
| [+] Server is listening on 5001 | |
| ...pre-payoad: | |
| ...post-payoad: | |
| ...pre-payoad: d | |
| ...post-payoad: 3 | |
| ...pre-payoad: d3 | |
| ...post-payoad: d3 | |
| ...pre-payoad: d3a | |
| ...post-payoad: 0d3 | |
| ...pre-payoad: d3ad |