•  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
더 보기

나는 문법이다(비교)

r28 vs r29
1
2<a href="javascript:alert('XSS')">XSS</a>
3<script>
4 alert('hello');
2
3https://board.namu.wiki/b/report/2881617
4https://theseed.io/thread/ApatheticRebelliousYouthfulVolcano
5https://board.namu.wiki/b/report/2882745
6https://www.alphawiki.org/w/%EC%82%AC%EC%9A%A9%EC%9E%90:Sena128
7https://www.alphawiki.org/thread/AdjoiningWakefulAbruptBasin
8https://www.alphawiki.org/w/%EC%82%AC%EC%9A%A9%EC%9E%90:taejo79
9https://www.alphawiki.org/w/%EC%82%AC%EC%9A%A9%EC%9E%90:Fkou?rev=2
1
132
14{{{#!syntax javascript
15router.get(/^\/contribution\/(ip|author)\/(.+)\/edit_request$/, async function EditRequestList(req, res) {
16 const ismember = req.params[0];
17 const username = req.params[1];
18 var moredata = [];
198
209var data = await curs.execute("select flags, title, namespace, rev, time, changes, log, iserq, erqnum, advance, ismember, username, loghider from history \
2110 where cast(time as integer) >= ? and ismember = ? " + (username.replace(/\s/g, '') ? "and lower(username) = ?" : "and (lower(username) like '%' || ?)") + " order by cast(time as integer) desc", [
2211 Number(getTime()) - 2592000000, ismember, username.toLowerCase()
2312 ]);
2413}}}
2514
2615{{{#!html
2716<h1>와우 친구들! 빡빡이 아저씨야</h1>
2817}}}
2918
3019렌더링 의외로 잘 되는듯
3120
3https://board.namu.wiki/b/report/2881617
4https://theseed.io/thread/ApatheticRebelliousYouthfulVolcano
5https://board.namu.wiki/b/report/2882745
6https://www.alphawiki.org/w/%EC%82%AC%EC%9A%A9%EC%9E%90:Sena128
7https://www.alphawiki.org/thread/AdjoiningWakefulAbruptBasin
1921
20var data = await curs.execute("select flags, title, namespace, rev, time, changes, log, iserq, erqnum, advance, ismember, username, loghider from history \
2123 where cast(time as integer) >= ? and ismember = ? " + (username.replace(/\s/g, '') ? "and lower(username) = ?" : "and (lower(username) like '%' || ?)") + " order by cast(time as integer) desc", [
2224 Number(getTime()) - 2592000000, ismember, username.toLowerCase()
......
22다음은 Lpyton의 차단 내역이다.