Cross-site storage and repair solutions for Sina Blog

The nickname of the Sina Blog avatar does not filter the submitted data. attackers can submit malicious code. At the same time, security settings such as verification codes are not found in nickname modification, which may cause a CSRF Vulnerability (not tested ).
At the same time, Unicode Chinese encoding is not filtered in the Custom module, resulting in cross-site storage (only Internet Explorer 6 and Internet Explorer 7 can be affected ).
 
 
Proof of vulnerability:
 
In the Avatar nickname, You need to capture the packet and change the package. submit:
Youstar <script> alert (/youstar/) </script>
Custom module:
 
SRC = & #106; & #97; & #118; & #97; & #115; & #99; & #114; & #105; & #112; & #116; & #58; & #97; & #108; & #101; & #114; & #116; & #40; & #100; & #111; & #99; & #117; & #109; & #101; & #110; & #116; & #46; & #99; & #111; & #111; & #107; & #105; & #101; & #41;>
Solution:
 
1. After the content submitted on each page of the blog is saved to the database, the data needs to be filtered and encoded before being displayed.
2. For cross-site attacks, various types of codes need to be classified and then filtered.
 
Author youstar @ wooyun