The general attack is to write a script to see if it can be executed, you can determine whether it is an attack, for example, I write <script> alert ("Executed me!!!"). "); </script>, and see if the page can be executed when it is loaded. So far the general web site This code will not be executed, but in a different way?
For example <script>alert (String.fromCharCode (88,83,83)) </script>, it is estimated that there are several web site implementation bar, we all know.
Below look at the more wretched test example, ';! --"<xss>=&{()}, this is testing whether there will be a good example of XXS, and then try to see how several sites can resist live, the following is a random example of my writing, and then test a few sites to see,
Source code: ';! --"; eval (' alert ') What's the situation with your uncle? \')');" <x<alert (1234) >ss>=&{()}, and then try the screenshot (no malice just test!). ）：
Http://search.360buy.com/Search?book=y&keyword=1
