Collected research

Google Indexes XSS

ha.ckers.org web application security lab

Proof, found by Ghozt, that Google indexes XSS URLs: a search result contained a reflected cross-site scripting link picked up from blog posts by Nitesh Dhanjani. A working exploit would have been indexed the same way, so persistent XSS on trusted, high-ranking domains such as .edu TLDs gains extra reach.

Record

Document

ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

XSS

In the archive

• Collected in the 2006 research round

Tags

• xss
• detection
• case-study
• info-leak
• abuse-of-functionality
• large-scale-scan
• owasp-a03-2021
• owasp-a04-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.