Sina blog XSS vulnerability-vulnerability warning-the black bar safety net
This afternoon just registered a Sina blog. And Baidu space, Sina only allows the editing part of the HTML Tag, the shield a lot of Tag and HTML attribute, the event is intended to prohibit the malicious code. Built a custom panel, find the content allowed in a STYLE tag, then write the following...