From cd11b75faeed7e55e6b5019b491417225d57c431 Mon Sep 17 00:00:00 2001
From: "Achim D. Brucker" <adbrucker@0x5f.org>
Date: Wed, 24 Jun 2015 16:59:24 +0200
Subject: [PATCH] Initial commit.

---
 .../examples/js_string_001.html               | 20 ++++++++++++++
 .../examples/js_string_002.html               | 25 ++++++++++++++++++
 .../examples/js_string_003.html               | 26 +++++++++++++++++++
 .../examples/js_string_co_001.html            | 24 +++++++++++++++++
 4 files changed, 95 insertions(+)
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_string_001.html
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_string_002.html
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_string_003.html
 create mode 100644 src/eu.aniketos.dasca.js/examples/js_string_co_001.html
diff --git a/src/eu.aniketos.dasca.js/examples/js_string_001.html b/src/eu.aniketos.dasca.js/examples/js_string_001.html
new file mode 100644
index 0000000..2cbb838
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_string_001.html
@@ -0,0 +1,20 @@
+
+<html><head><title>Test XSS </title>
+</head><body>
+<form name="test" action="">
+Name: <input type="text" name="eingabe" onBlur="validate(this.value)"><br> 
+leave the input empty than klick somwhere
+</form>
+<script type="text/javascript">
+document.test.eingabe.focus(); // first set focus on input
+function validate (input) {	// this method is called @ leave focus on input
+  if (input == "") {
+
+  var info = window.location.href;
+ 
+  alert(document[String.fromCharCode(87,82,73,84,69)]+info);  
+  document.write(info); // should be found
+  }
+}
+</script>
+</body></html>
diff --git a/src/eu.aniketos.dasca.js/examples/js_string_002.html b/src/eu.aniketos.dasca.js/examples/js_string_002.html
new file mode 100644
index 0000000..4e85ffe
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_string_002.html
@@ -0,0 +1,25 @@
+<!-- normally the command document.write(info) would be found, but is the write part described 
+by letters from a String maybe not-->
+
+<html><head><title>Test XSS </title>
+</head><body>
+<form name="test" action="">
+Name: <input type="text" name="eingabe" onBlur="validate(this.value)"><br> 
+leave the input empty than klick somwhere
+</form>
+<script type="text/javascript">
+document.test.eingabe.focus(); // first set focus on input
+function validate (input) {	// this method is called @ leave focus on input
+  if (input == "") {
+
+  var info = window.location.href;
+  var infos= "awraiatae"
+  var temp= infos.charAt(1)+infos.charAt(2)+infos.charAt(4)+infos.charAt(6)+infos.charAt(8)
+
+  
+    document[temp](info);// = document.write(info) will not be found by ff
+  //document.write(info); // should be found
+  }
+}
+</script>
+</body></html>
\ No newline at end of file
diff --git a/src/eu.aniketos.dasca.js/examples/js_string_003.html b/src/eu.aniketos.dasca.js/examples/js_string_003.html
new file mode 100644
index 0000000..911ced9
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_string_003.html
@@ -0,0 +1,26 @@
+<!-- normally the command document.write(info) would be found, but is the write part described 
+by letters from a String maybe not-->
+
+<html><head><title>Test XSS </title>
+</head><body>
+<form name="test" action="">
+Name: <input type="text" name="eingabe" onBlur="validate(this.value)"><br> 
+leave the input empty than klick somwhere
+</form>
+<script type="text/javascript">
+document.test.eingabe.focus(); // first set focus on input
+function validate (input) {	// this method is called @ leave focus on input
+  if (input == "") {
+
+  var info = window.location.href;
+  var temp3="wri";
+  var temp2="te";
+  var temp= temp3.concat(temp2);
+
+  
+    document[temp](info);// = document.write(info) will not be found by ff
+  //document.write(info); // should be found
+  }
+}
+</script>
+</body></html>
\ No newline at end of file
diff --git a/src/eu.aniketos.dasca.js/examples/js_string_co_001.html b/src/eu.aniketos.dasca.js/examples/js_string_co_001.html
new file mode 100644
index 0000000..2099842
--- /dev/null
+++ b/src/eu.aniketos.dasca.js/examples/js_string_co_001.html
@@ -0,0 +1,24 @@
+<!-- shows how document write url can be shared into different strings -->
+
+
+<html>
+	<head>
+<title>Test Eval </title>
+<script type="text/javascript">
+function validate () {	// this method is called @ submit
+var t = document.URL;
+var f = "write";
+var k = document[f];
+k(t);
+
+  }
+
+</script>
+	</head>
+<body>
+<form name="test" action="" >
+Name: <input type="text" name="eingabe" id="in"><br> 
+<input name="submit" value="submit" type="button" onClick="validate()">
+</form>
+
+</body></html>
