Netease mail XSS vulnerability on mobile phones (affects emails such as 163 and 126)

Netease mail XSS vulnerability on mobile phones (affects emails such as 163 and 126)

Well, according to the previous brain hole, I tried again and found that both 163 and 126 had it ~

Change the recipient's name to
 

Then, when I checked the phone, I had a pleasant pop-up window ~
 

 

If the computer is filtered out, the question is: which one is the best filter on the mobile phone?

Well .. If it is harmful, you can use cookies or become a worm ..

 

 

Solution:

-Encode is more comprehensive.