Re: XSS (in 20 chars) in Microsoft IIS 7.5 error message

Posted by James Hooker on Dec 03

You could skip the schema on any includes, and just use ‘//’. That will
then use the schema provided in the original URL. That will save you 4
characters at least. You can also skip most quotes in tags – that will save
you a few more characters. Link shortening services might also be of use,
however one that generates links short enough might be hard to come by –
more likely, you’ll need a 3 character domain, with a 2 character…

Leave a Reply