js字符串拼接 ·${}· 

var a = 1;
console.log(`a的值是：${a}`); //a的值是：1

https://portswigger.net/web-security/cross-site-scripting/contexts/lab-javascript-template-literal-angle-brackets-single-double-quotes-backslash-backticks-escaped

https://xxxxxxxxxx.web-security-academy.net/?search=%24%7Balert%281%29%7D
posted @ 2020-09-17 09:06  mrhonest  阅读(5426)  评论(0)    收藏  举报