Ao you browser defects cause remote reading of user data + ao you main site XSS

Ao you browser defects cause remote reading of user data + ao you main site XSS

Found through mxwebkit. dll of aoyou

Analyzed mx: // res/error/danger_site.htm? The url will jump to the main site
Http://www.maxthon.cn/security/safe? Url = XXX
The main site xss vulnerability caused by the absence of url parameter Filtering

The browser's defects allow you to operate the browser's built-in APIs in the maxthon.cn domain

Here, we use the example of reading the user's historical access records.
About: history

Maxthon. browser. history. HistoryManager is called. You can use the console to debug specific functions.
Maxthon. browser. history. HistoryManager. getLastOpenList ();
Directly construct payload
Var a = maxthon. browser. history. HistoryManager. getLastOpenList (); alert ("your recent access history:" + JSON. stringify ());
Encode
Http://www.maxthon.cn/security/safe? Url =