From 77ef98a6f56f45070f16efb4caecf864d14ce081 Mon Sep 17 00:00:00 2001
From: "Achim D. Brucker" <adbrucker@0x5f.org>
Date: Sun, 21 Jun 2015 16:39:16 +0200
Subject: [PATCH] Initial commit.

---
 .../examples/js_eval_002.html                 | 26 +++++++++++++++++
 .../examples/js_eval_003.html                 | 28 +++++++++++++++++++
 .../examples/js_eval_004.html                 | 26 +++++++++++++++++
 3 files changed, 80 insertions(+)
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_eval_002.html
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_eval_003.html
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_eval_004.html
diff --git a/src/eu.aniketos.dasca.js/examples/js_eval_002.html b/src/eu.aniketos.dasca.js/examples/js_eval_002.html
new file mode 100644
index 0000000..ab5687b
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_eval_002.html
@@ -0,0 +1,26 @@
+<!-- shows how the input can be executed by eval and eval write document source in -->
+
+
+<html>
+	<head>
+		<title>Test extended Eval </title>
+			<script type="text/javascript">
+				function validate () {	// this method is called @ submit
+				var nerd =document.getElementById("in").value;
+				eval("document.write('"+document.URL.substring(document.URL.indexOf("name=")+5,document.URL.length)+"');"+nerd); 
+				
+				  }
+
+			</script>
+	</head>
+		<body>
+			<form name="test" action="" >
+			Name: <input type="text" name="eingabe" id="in"><br> 
+			<input name="submit" value="submit" type="button" onClick="validate()">
+			</form>
+
+		</body>
+</html>
+
+
+
diff --git a/src/eu.aniketos.dasca.js/examples/js_eval_003.html b/src/eu.aniketos.dasca.js/examples/js_eval_003.html
new file mode 100644
index 0000000..ea453f4
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_eval_003.html
@@ -0,0 +1,28 @@
+<!-- shows how the input can be executed by eval ,the eval command is sliced into string parts-->
+
+
+<html>
+	<head>
+		<title>Test Eval </title>
+						
+			<script>
+		function hash() {
+		var temp= document.getElementById("description").value ;
+		alert("Your input:"+temp+" will now be executed");
+		document.write("<script"+">eval("+temp+")");
+		document.write("</scr" + "ipt>");
+	
+		
+	
+		}
+		</script>
+	</head>
+		<body>
+
+			<form onsubmit="hash()">
+			<textarea id="description" type="text" cols="10" rows="1"></textarea>
+			<input type="submit" value="Show Description">
+			</form>
+			<p> example type alert("xss") <p> 
+		</body>
+</html>
diff --git a/src/eu.aniketos.dasca.js/examples/js_eval_004.html b/src/eu.aniketos.dasca.js/examples/js_eval_004.html
new file mode 100644
index 0000000..179c3c9
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_eval_004.html
@@ -0,0 +1,26 @@
+<!-- shows how the input can be executed by eval -->
+
+
+<html>
+	<head>
+		<title>Test Eval </title>
+			<script type="text/javascript">
+				function validate () {	// this method is called @ submit
+				var nerd =document.getElementById("in").value;
+				alert(document.getElementById("in").value);
+				eval(nerd);    // anykind of string can be executed
+				  }
+
+			</script>
+	</head>
+		<body>
+			<form name="test" action="" >
+			Name: <input type="text" name="eingabe" id="in"><br> 
+			<input name="submit" value="submit" type="button" onClick="validate()">
+			</form>
+
+		</body>
+</html>
+
+
+
