TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Resolving cross site scripting issues.

11 点作者 rayvega超过 14 年前

2 条评论

joe_the_user超过 14 年前
It's javascript injection.<p>But the clever method of finding the result seems as encouraging as clever methods for finding null pointers. Sure, try initializing your memory beforehand to a call to the debugger - (or just 0 and have that trigger the usual exception handling). Sure you can do this but those null pointers keep popping up. I'd assume you could find analogy for SQL injection too.<p>I'm more interested in techniques which prevent this from happening to begin with. The clever techniques often only help you find stuff you have a good idea is already there.
评论 #1706705 未加载
js4all超过 14 年前
Nice trick. I didn't know, that firebug &#38; co support soft breakpoints by inserting the javascript command "debugger;".