XSS attack with javascript in img src attribute

后端 未结 3 1829
离开以前
离开以前 2021-02-07 11:31

Some older browsers are vulnerable to XSS attacks as such


Current versions of IE, FF, Chrome are

3条回答
  •  不要未来只要你来
    2021-02-07 11:56

    All major browsers are still vulnerable to these attacks. Tons of ways of using img tags are still around.. For example...

    Look for RSnake's xss cheatsheet, those are just some vectors. By the way, I've heard he's coming up with a new version of his cheatsheet soon.

提交回复
热议问题