No. 1 store address book storage type cross-site

The address book function of No. 1 stores has a storage-type cross-site.
1. The recipient field modifies the post request through webscarab and bypasses the Character Count limit to implement cross-site communication.
2. The recipient address can be entered in the input box to implement cross-site code.
Multiple Fields in the personal settings function exist across sites. The nickname is one of them, and someone has already submitted it here and won't repeat it.
 




 
 
Solution:

We recommend that you encode the output of user submitted data in html format.