Fresh fruit reader reflection xss

The web version of the fresh fruit reader directly brings hash into the js function and executes it... this is the first time you can see it...

Var HashListener = {
...
Init: function (c, ){
// Function a listens for hashc changes
This. onHashChanged = a |
Function (){};
...
},
...
}

HashListener. init ("/static/ui/history.htm ",
// Initialize HashListener. PageMgr. loadHistory is the function for listening to hashchange.
Function (c ){
PageMgr. loadHistory (c)
});

PageMgr. loadHistory = function (call ){
Var script = decodeURIComponent (call ));
If (script! = This. currentSrc ){
Try {
// Dynamic execution
Eval (script );
This. currentSrc = script
} Catch (ex ){
Console. log (ex );
Return false
}
}
Return true
}


Solution:

Filter it out. A big wave of google reader is coming again.