Changtu network URI_XSS

URI cross-site, originally thought there was a parameter to have cross-site, did not expect to play... first ...... Then I thought about blind playing. I couldn't try it at first, so I thought it was/was filtered out. Later I thought about it. This is the cross-site structure formed by URI. If there is a/structure, it will be damaged. You can use charcode to encode it once, and then use string. fromcharcode to decode it back to bypass the/restriction. Dialog Box Token successfully intercepts cookie =-=! A long URL can be modified with a short address. Out-of-band error message JMXInvokerServlet


Solution: NO ~