master

分支 (2)

标签 (15)

管理

管理

master

gh-pages

3.1.6

3.1.5

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.5

3.0.4

3.0.3

3.0.2

3.0.1

3.0

3.0-rc-1

3.0-beta

XSStrike
/
test.html

<!DOCTYPE html>
<html>
    <body>
        <div>
            <pre>document.writeln(new URL(window.location.href).searchParams.get("a"))</pre>
            <script>document.writeln(new URL(window.location.href).searchParams.get("a"))</script>
        </div>
        <div>
            <pre>document.write(new URLSearchParams(window.location.search).get("b"))</pre>
            <script>document.write(new URLSearchParams(window.location.search).get("b"))</script>
        </div>
        <div>
            <pre>eval(new URLSearchParams(window.location.search).get("c") || "")</pre>
            <script>eval(new URLSearchParams(window.location.search).get("c") || "")</script>
        </div>
        <div>
            <div id="xss-d"></div>
            <pre>document.querySelector("#xss-d").innerHTML = new URLSearchParams(window.location.search).get("d")</pre>
            <script>document.querySelector("#xss-d").innerHTML = new URLSearchParams(window.location.search).get("d")</script>
        </div>
    </body>
</html>