Hacker News new | ask | show | jobs
by stevekemp 4401 days ago
My solution was:

     <img src="foo" onMouseOver="alert(33);"
Interesting to see so many people used onError instead.
4 comments

One of the hints says you can use onError()

I'm sure that's where most people are getting it from.

img src='garbage' onerror='script' is gauranteed to auto execute, where mouseover requires the user to mouse over the element.
onerror= is usually the one used in CTF and XSS examples!
I used just onclick