li
1b24994e74
- Contract.php: 返回合约账户余额(balance_contract) - My.php: 地址管理增加BTC/ETH - AppContract.php: 一键平仓(closeall) - AppProxy.php: 代理专属注册链接 + 分级权限(L1/L2) - site.php: 手续费减半(0.018→0.009) - agent_permission_setup.sql: 代理权限SQL - crypto_news_crawler.py: 新闻自动采集脚本
30 lines
898 B
HTML
Executable File
30 lines
898 B
HTML
Executable File
<!DOCTYPE HTML>
|
|
<html>
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<title>xss-test</title>
|
|
<script src="../dist/template-native.js"></script>
|
|
</head>
|
|
|
|
<body>
|
|
<div id="content"></div>
|
|
<script id="test" type="text/html">
|
|
<!--<img title="这是没转义的输出" src="<%=#url_0%>" />-->
|
|
<img src="<%=url_1%>" />
|
|
<img src="<%=url_2%>" />
|
|
<img src="<%=url_3%>" data-index="<%=index%>" />
|
|
</script>
|
|
|
|
<script>
|
|
var data = {
|
|
url_0: 'http://mat1.gtimg.com/www/images/qq2012/qqlogo_1x.png?" onload="alert(\'no escape\')"',
|
|
url_1: 'http://mat1.gtimg.com/www/images/qq2012/qqlogo_1x.png?" onload=alert(1)',
|
|
url_2: 'http://mat1.gtimg.com/www/images/qq2012/qqlogo_1x.png?" onload=alert(2)',
|
|
url_3: 'http://mat1.gtimg.com/www/images/qq2012/qqlogo_1x.png?\\',
|
|
index: '\\"&#34; onload=alert(2)'
|
|
};
|
|
var html = template('test', data);
|
|
document.getElementById('content').innerHTML = html;
|
|
</script>
|
|
</body>
|
|
</html> |