CSS code to solve the problem of web hanging horse

Source: Internet
Author: User
Tags expression

Two lines of CSS to solve, a total of 5 options

One

Iframe{n1ifm:expression (this.src= ' About:blank ', this.outerhtml= ');} * * This line of code is to solve the problem of an IFRAME!

Script{nojs1:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? document.write (' Trojan was successfully quarantined! ’):‘’);}

Principle: "Script" marked by the src into lowercase, and then see if the "http" start of the Outland JS script file, if it is, the page content empty and write "Trojan was successfully isolated!" ”。 otherwise normal display. Disadvantage: Visitors cannot see the page that is infected with the "script" Trojan.

Two

Iframe{nifm2:expression (this.src= ' About:blank ', this.outerhtml= ');}

Script{no2js:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? Document.close (): "");

Principle: The document.write () of the JS file in Outland is forced off by using Document.close (). The Trojan has not yet finished writing, only part of the forced cache output, the rest will not be written again.

Three

Iframe{ni3fm:expression (this.src= ' About:blank ', this.outerhtml= ');}

Script{n3ojs:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? Document.execcommand (' Stop '): ');

Principle: The same to the JS file in Outland, immediately call IE private ExecCommand method to stop all requests on the page, so the next JS file is also forced to stop downloading. Just like we clicked the "Stop" button on the browser. It seems that this is JS analog IE stop button a method.

Four

Iframe{nif4m:expression (this.src= ' About:blank ', this.outerhtml= ');}

Script{noj4s:expression (if (this.src.indexOf (' http ') ==0) this.src= ' res://ieframe.dll/dnserror.htm ');

Principle: The JS file in the IE404 of SRC rewrite cost to the address of the wrong page, so that the JS code in Outland will not be downloaded.

Five

Iframe{nifm5:expression (this.src= ' About:blank ', this.outerhtml= ');}

Script{noj5s:expression (This.id.toLowerCase (). IndexOf (' Vok ')! =-1)? document.write (' Trojan was successfully quarantined! ’):‘’));}

The fifth scenario of the page HTML source code "script" to add "LH" as the prefix of the ID, such as LHWEATHERJSAPI, "script src=" ***/**.js "id=" Lhsearchjsapi ""/script "

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.