Judgment on bypassing refer

Think about a bunch of things. Let's make it easy!

I have two questions:

First, in the IE kernel, the drag-and-drop function includes refer.

For example, if you enter web.im.baidu.com directly, you cannot access it. You can access it in this way, and it should be the fastest.

Second, some cumbersome methods can also break through refer restrictions, such as pseudo protocols:

Javascript: document. write ("<a href = http://web.im.baidu.com> open </a> ")

I remember that the previous monyers game also had a judgment on refer. At that time, the xss principle was used to break through. In fact, there were quite a lot of other methods.

Recently readingAnethaThat's why the UI is really not written-so we should not be confused by the surface. In fact, his best things are in base. js, and his thoughts are very evil. As for how evil is, you can only know it after reading the code! You can also look at the following Architecture:

Evil! He's all under suspicion!

This is not completely completed yet. If it is all done, it should be no less important than jquery. We were cheated by the strong winds -- his anetha was not referring to this xss attack platform, but the stuff behind it that played a supporting role. Oh, with that thing, each of us can construct our own attack platform. According to the jquery line, this stuff may have countless plug-ins in the future. We chose plug-ins to construct a unique attack method!

Btw: I like this functional programming style very much. It's very clear to read, just like reading a novel. Hey hey!

Monyer