New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

个人资料网址检测问题 #21

Open

iovxw opened this issue Jun 18, 2014 · 1 comment

Contributor

iovxw commented Jun 18, 2014

可以填入类似于

http://www.xxxx.com/<script>alert("***");</script>

这种的网址

然后会导致显示出错

The text was updated successfully, but these errors were encountered:

Contributor Author

iovxw commented Jun 18, 2014

其他的也都一样，可以随意插入脚本

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment