XSS_polyglot in www.blogger.com

On 2019-09-03T08:15:13.973032+00:00 we found suspicious pattern XSS_polyglot, type: Suspicious, (Detect JavaScript XSS polyglot) in the page https://www.blogger.com/comment.g?blogI…

The suspicious code sample:

b'javascript:' … b'javascript:' … b'javascript:' … b'javascript:' … b'javascript:' … b'</noscript>' … b'</noscript>' … b'</title>' … b'</textarea>' … b'</style>' … b'</style>' … b'</style>' … b'</style>' … b'</style>' … b'svg/' … b'svg/' … b'svg/' … b'svg/' … b'svg/' … b'/*' … b'onload=' … b'onload=' … b'onload='

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!