JSPÒ³ÃæÖаüº¬µÄjsÎļþ£¬ÔÚIEÄÚ²»»á×Ô¶¯Ö´ÐÐ?
ÎÒÔÚJSPÀïÃæÐ´ÏÂÁË:
<HEAD>
<SCRIPT LANGUAGE="JavaScript" SRC="P.js"> </SCRIPT>
<%...
%>
</HEAD>
È»ºóÔÚP.jsÀïÃæ¾ÍÒ»¾ä»°alert("hello").
Ò³ÃæÖ´Ðнá¹û£¬²¢Ã»ÓÐÈκεÄalert³öÏÖ£¬µ«ÊÇ <%¡£¡£¡£%>ÀïÃæµÄÄÚÈݶ¼ÊÇÕýÈ·½âÎö¹ýµÄ¡£È»ºóÎÒÔÚ <head>±êÇ©ºó¼ÓÉÏ
<body onload=alert("haha")> </body>£¬Ò²ÊÇͬÑùûÓÐÈκÎÖ´Ðнá¹û¡£
ÄѵÀä¯ÀÀÆ÷¿´µ½ºó׺ÃûÊÇ.jspµÄ¾Í²»Ö´ÐÐjavascript? ΪʲôÆÕͨµÄhtmlÀïÃæÇ¶ÈëµÄjavascript´úÂëÐУ¬°üÀ¨onload=...µÄ´úÂ룬×ÜÊÇÄܹ»µÃµ½Ö´ÐÐÄØ?
лл!!!!!!
End_rbody_60447363//-->
¸Ã»Ø¸´ÓÚ2009-10-19 10:45:22±»¹ÜÀíԱɾ³ý
¶ÔÎÒÓÐÓÃ[0]
¶ª¸ö°åש[0]
ÒýÓÃ
¾Ù±¨
¹ÜÀí
TOP
SoLeisure
(SoLeisure)
µÈ¡¡¼¶£º
#3Â¥ µÃ·Ö£º10»Ø¸´ÓÚ£º2009-10-16 00:09:35
javascriptµ±È»¿ÉÒÔÔÚ.jspÔËÐа¡.
<body onload=alert("haha")> </body>²âÊÔÎÞÎÊÌâ
<SCRIPT LANGUAGE="JavaScript"> alert("test"); </SCRIPT>ÕâÒ²ÊÇûÓÐÎÊÌâ
<SCRIPT LANGUAGE="JavaScript" SRC="P.js"> </SCRIPT>˵Ã÷ÄãP.jsµÄ·¾¶ÓÐÎÊÌâÁË
ͬÒâ3Â¥
¿ÉÄÜÊÇsrcµÄÁ´½Ó·¾¶³öÏÖ´íÎó Ò»°ãÓÃÏà¶Ô·¾¶£¡
ÁíÍ⣬ÔÚIEÀï²é¿´Ô´´úÂ룬¿´¿´P.jsÓÐûÓаüº¬½øÀ´£¡
Äã¿ÉÒÔʹÓÃfirefox¶Ôjavascript½øÐе÷ÊÔ¡£Á÷³ÌÒ»Çå¶þ³þ¡£
{{----}
Ïà¹ØÎÊ´ð£º
ÎÒÏÖÔÚÏëÓÃsshÕûºÏÀ´×öÒ»¸öÂÛ̳£¬µ«Êý¾Ý¿â·½Ãæ²»ÐУ¬ÎÒÖ÷Òª²»»áÉæ¼°Êý¾Ý¿â£¬²»ÖªµÀ·¢Ìû±í£¬ºÍ»ØÌû±íÒªÈçºÎÉè¼ÆºÍÇø·Ö¡£²»ÖªµÀËÓÐÒ»¸ö¼òµ¥µÄ˼·£¬À´Éè¼ÆÕâЩ±í¡£Ð»Ð»ÁË¡£
·¢ÌûºÍ»ØÌûÓÃͬһÕÅ±í ¡£·¢Ìû id user ......
Ò»¸ö¾²Ì¬µÄhtmlÒ³Ãæ£¬ÃÀ»¯£¬½çÃæ²¼¾ÖÒѾ´¦ÀíºÃÁË £¬ÔÚ±àд³ÌÐòµÄʱºòÐèÒªÔÚת»¯³ÉJSPÒ³Ãæ£¬
ËùÒÔн¨Ò»¸öJSPÒ³Ãæ£¬½²ÔÀ´µÄ´úÂ뿽±´µ½ÀïÃæÈ¥£¬½á¹û²¼¾Ö±äÁË£¿
²»´æÔÚ·¾¶ÎÊÌâ!
ûÈË? ÕæÊ§°Ü!
......
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
org.apache.jas ......
±¾ÈË×öÁËÒ»¸öÄ£Ä⹺ÎïÍøÕ¾£¬Óöµ½Ò»Ð©ÎÊÌâ¡£
µÚÒ»¸öÓû§Ñ¡ÔñÁËA¡¢B¡¢CÉÌÆ·
È»ºóµÚ¶þ¸öÓû§Ö»Ñ¡ÔñDÉÌÆ·¡£
µã»÷²é¿´µÄʱºò£¬¹ºÎï³µÁгöA¡¢B¡¢C¡¢DËÄÖÖÉÌÆ·£¬ÇëÎÊÄÄÀï³öÁËÎÊÌ⣿
Java code:
<%@ page content ......
jsÖеķ½·¨£¬²»ÄÜÔÚjspÖе÷ÓÃÔõô½â¾ö£¿¼±£¡£¡!
²»Ã÷°×Òâ˼
ºÃºÃ¼ì²éÊDz»ÊÇ·¾¶µÄÎÊÌ⣬ºÜÓпÉÄÜ·¾¶²»¶Ôµ¼Öµ÷Óò»µ½
Ìùһϵ÷ÓõĴúÂë¿´¿´°¡~~
ÓÐûÓÐÕýÈ·ÒýÓÃjs£¿º¯ÊýÓÐûÓгõʼ»¯£¿....
jsp´úÂë±¾À´¾ ......