In jingdong online customer service system, customer service end of the page you can perform the client to write any JS code.
Process: 1. Customer service access. 2. To upload a picture. 3. Because jingdong to the editor is a contenteditable=true div, so we can be of its contents for editing. 4. In the picture on the Add event
Here, we see the picture on the onload event and not be filtered out, in the customer service end will be executed directly.
The customer service terminal staff confirmed the code execution.
For user-submitted content to be more strict the filter, the removal in some of the media elements on onload onerror etc. events