<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>安全 &#8211; ~</title>
	<atom:link href="https://moneyslow.com/tag/%e5%ae%89%e5%85%a8/feed" rel="self" type="application/rss+xml" />
	<link>https://moneyslow.com</link>
	<description></description>
	<lastBuildDate>Tue, 09 Apr 2019 13:37:35 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>
	<item>
		<title>xss</title>
		<link>https://moneyslow.com/xss.html</link>
		
		<dc:creator><![CDATA[moneyslow]]></dc:creator>
		<pubDate>Tue, 09 Apr 2019 12:15:44 +0000</pubDate>
				<category><![CDATA[newest]]></category>
		<category><![CDATA[安全]]></category>
		<guid isPermaLink="false">https://moneyslow.com/?p=8580</guid>

					<description><![CDATA[1.Non-persistent XSS 便携a.php &#60;?php $input = $_GET["param"]; echo "&#60;div&#62;".$input."&#60;/div&#62;"; ?&#62; 访问 https://www.moneyslow.com/a.php?param=&#60;script&#62;alert(/xss/)&#60;/script&#62; 2.DOM XSS &#60;html&#62; &#60;head&#62; &#60;meta http-equiv="Content-Type" content="text/html; charset=utf-8"&#62; &#60;script type="text/javascript"&#62; function changeLink() { var str = document.getElementById("text").value; document.getElementById("t").innerHTML="&#60;a href='"+str+"' &#62;testlink&#60;/a&#62;"; } &#60;/script&#62; &#60;/head&#62; &#60;div id="t"&#62;&#60;/div&#62; &#60;input type="text" id="text" value="" /&#62; &#60;input type="button" id="s" value="write" onclick="changeLink()" /&#62; &#60;/html&#62; 测试输入 ' onclick=alert(/xss) //]]></description>
		
		
		
			</item>
	</channel>
</rss>
