Blog/Security/XSS/src/comments2.html at master · projectcss/Blog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <link rel="stylesheet" href="/node_modules/bootstrap/dist/css/bootstrap.min.css" />
    <title>Document</title>
    <style>
        .list-group-item span {
            color: #337ab7;
            display: inline-block;
            min-width: 40px;
            font-weight: bold;
        }
    </style>
</head>

<body>
    <div class="container">
        <div class="row">
            <div class="col-md-12 col-lg-12">
                <div class="col-md-6 col-md-offset-3 col-lg-6 col-lg-offset-3">
                    <div class="panel panel-info" style="margin-top:50px;">
                        <div class="panel-heading">
                            <h3>论坛</h3>
                        </div>
                        <div class="panel-body">
                            <ul class="list-group">

                            </ul>
                            <form onsubmit="return false">
                                <div class="form-group">
                                    <label for="comments">打个招呼吧</label>
                                    <input class="form-control" type="text" id="comments" />
                                </div>
                                <div class="form-group">
                                    <input class="btn btn-primary" type="button" id="publish" value="发帖" />
                                </div>
                            </form>

                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>
</body>
<script src="/node_modules/jquery/dist/jquery.js"></script>
<script>
    // 存储型 XSS 攻击
    $(document).ready(function () {

        //获取帖子列表
        function getList() {
            $.get('/getComments2').then(res => {
                if (res.code === 0) {
                    let lists = '';
                    $.each(res.comments, (index, comment) => {

                        content = encodeHtml(comment.content);
                        console.log(comment.content,'  ******   ', content)
                        lists += `<li class="list-group-item"><span>${comment.username}:</span> ${content}</li>`;
                    });
                    $('.list-group').html(lists);
                }
            });
        };
        getList();

        /**
         * 1. 客户端数据传递给服务器之前，先检验过滤
         * 2. 服务器接收到数据，在存储到数据库之前，做一次过滤
         * 3. 前端接收到服务器传递过来的数据，在展示到页面前，进行一次过滤
         */
        //Html 编码
        function encodeHtml(str) {
            return str.replace(/"/g, '&quot;')
                    .replace(/'/g, '&apos;')
                    .replace(/</g, '&lt;')
                    .replace(/>/g, '&gt;');
        }
        //Html 解码
        function decodeHtml(str) {
            return str.replace(/&quot;/g, '\"')
                    .replace(/&apos;/g, '\'')
                    .replace(/&lt;/g, '<')
                    .replace(/&gt;/g, '>');
        }
        $('#publish').click(function () {
            let comment = $('#comments').val();
            $.post('/addComment2', { comment: encodeHtml(comment) }).then(res => {
                if (res.code === 1) {
                    //跳去登录页
                    location.href = '/login.html';
                } else {
                    //获取新的帖子列表
                    getList();
                    $('#comments').val('');
                }
            });
        });
    });

</script>

</html>