This will be XSS in Safari by using data scheme. Step to reproduce. Type <iframe src="https://example.com/hackmd.html" sandbox="allow-scripts ...
確定! 回上一頁