http://www.wechall.net/challenge/htmlspecialchars/index.php
单引号也需要encode，否则可以添加事件如 onclick=alert(1)
所以需要给 htmlspecialchars加上 ENT_QUOTES
↧
htmlspecialchars
↧
Channel:
记事本
X
Are you the publisher?
Claim or
contact us
about this channel.
X
0
Channel Details:
- Title: 记事本
- Channel Number: 60259461
- Language: English
- Registered On: March 2, 2016, 11:07 pm
- Number of Articles: 122
- Latest Snapshot: March 18, 2016, 7:31 am
- RSS URL: http://rk700.github.io/rss.xml
- Publisher: http://rk700.github.iohttp://rk700.github.io
- Description: 记事本 - rk700
- Catalog: //naphthalol66.rssing.com/catalog.php?indx=60259461
© 2025 //www.rssing.com