你即將離開本站

並前往https://labs.detectify.com/2017/01/18/stored-xss-ing-millions-of-sites-through-html-comment-box/

Stored XSS-ing Millions Of Sites Through HTML Comment Box

It seemed to be very fancy and confusing, and after some tinkering I was able to reduce it to the following XSS payload:

確定！ 回上一頁

查詢 「XSS payload」的人也找了：

  1. XSS payload
    2.
  2. XSS cheat sheet
    3.
  3. XSS escape
    4.
  4. XSS payload bypass
    5.
  5. JavaScript XSS filter
    6.
  6. Script alert XSS script
    7.
  7. SQL Injection payload
    8.
  8. Cross site scripting: Content sniffing
    9.