浏览器漏洞研究思路
<form action="https://wwww.jd.com" target="1" method="post" onsubmit="setTimeout('go()', 1);" id="2">
<input type="submit"></input>
</form>
<script>
function go(){
var c= window.open("javascript:document.write(\"test\")", "1");
}
</script>
<< 上一篇
下一篇 >>