Louis Random Audit avatar

Gist XSS Verification Test

louis.random

Published: 06 Apr 2026 › Updated: 06 Apr 2026Gist XSS Verification Test

Gist XSS Verification Test


Gist Embed XSS Verification

Test 1: Valid Gist Embed

Baseline - should render gist embed:

~~~ embed:fffbe6a9e9858c7e3546fb1d55782152 gist metadata:YVZvbHBlL2ZmZmJlNmE5ZTk4NThjN2UzNTQ2ZmIxZDU1NzgyMTUy ~~~

Test 2: JSONP Callback Injection

If alert() fires, JSONP callback injection works:

~~~ embed:test gist metadata:YVZvbHBlL2ZmZmJlNmE5ZTk4NThjN2UzNTQ2ZmIxZDU1NzgyMTUyLmpzb24/Y2FsbGJhY2s9YWxlcnQj ~~~

Test 3: Sanitizer Tests



js href
x

Audit test by louis88

Leave Gist XSS Verification Test to:

Written by

<img src=x onerror=alert('about-xss')> Test bio

Read more #test posts

Best Posts From Louis Random Audit

We have not curated any of louis.random's posts yet. But you can encourage our curation team to review posts by visiting them regularly and by referring other readers. Because we give priority to frequently read content.

More Posts From Louis Random Audit