Tencent Weibo reflected XSS vulnerability and repair

Brief description: After clicking a specific content on Weibo, you can call an external JS file on the current page.
(No account yet, leave a nickname) -- by gainover 2011/7/13
Detailed description:
Cause of the vulnerability: When music is inserted into Weibo, no judgment is made on the length and content of the music address. As a result, a script can be constructed to form XSS. For example:

 

 

Proof of vulnerability:

 

The above is the use effect:

The following is the code for calling external JS. When publishing Weibo, replace musicLocation with the following code:

Http://www.bkjia.com "> <a href ="
Solution: perform special character filtering on the content of the musicLocation field accepted by publish. php.