Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

XSS 漏洞 #298

Closed
MHuiG opened this issue Apr 26, 2020 · 13 comments
Closed

XSS 漏洞 #298

MHuiG opened this issue Apr 26, 2020 · 13 comments

Comments

@MHuiG
Copy link

@MHuiG MHuiG commented Apr 26, 2020

If you want to report a bug, please provide the following information:

前端验证都是无效的,可以绕过的。

请在展示数据的时候过滤数据。

@xCss 回来重改!!!!

@Reqwey
Copy link

@Reqwey Reqwey commented Apr 26, 2020

😂

@MHuiG
Copy link
Author

@MHuiG MHuiG commented Apr 26, 2020

不想要Gitalk了 /哭了

这漏洞八成是堵不上了

0170

@MHuiG MHuiG mentioned this issue Apr 26, 2020
@MHuiG
Copy link
Author

@MHuiG MHuiG commented Apr 26, 2020

@Linhk1606 OK了 换 Valine

@MHuiG MHuiG closed this as completed Apr 26, 2020
@Reqwey
Copy link

@Reqwey Reqwey commented Apr 26, 2020

@Linhk1606 OK了 换 Valine

不过话说Gitalk UI的细节做的真的比Valine好看一点欸😅

@MHuiG
Copy link
Author

@MHuiG MHuiG commented Apr 26, 2020

@Linhk1606 OK了 换 Valine

不过话说Gitalk的细节做的真的比Valine好一点点欸😅

Gitalk是用了UI框架

@MHuiG
Copy link
Author

@MHuiG MHuiG commented Apr 26, 2020

膜拜一下大佬

@xCss
Copy link
Owner

@xCss xCss commented Apr 26, 2020

image

@so1ve
Copy link

@so1ve so1ve commented Apr 26, 2020

太狠了 @xCss 你这直接屏蔽HTML那我的自定义标签咋办😏

@xCss
Copy link
Owner

@xCss xCss commented Apr 26, 2020

太狠了 @xCss 你这直接屏蔽HTML那我的自定义标签咋办😏

没了,下一个~

@so1ve
Copy link

@so1ve so1ve commented Apr 26, 2020

太狠了 @xCss 你这直接屏蔽HTML那我的自定义标签咋办😏

没了,下一个~

不懂就问(你肝了多久)

@xCss
Copy link
Owner

@xCss xCss commented Apr 26, 2020

太狠了 @xCss 你这直接屏蔽HTML那我的自定义标签咋办😏

没了,下一个~

不懂就问(你肝了多久)

我也不知道,实在肝不动就睡了,也没看时间~~

@lilydjwg
Copy link

@lilydjwg lilydjwg commented Jun 8, 2020

我是不是一不小心错过了一个亿的广告费 😂

@Reqwey
Copy link

@Reqwey Reqwey commented Jun 9, 2020

@lilydjwg 大兄弟,很有想法啊

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants