XSS basic content learning (continuous update)

The foundation is not solid , The earth trembled and the mountains swayed . Make up for it XSS Basic knowledge of , As a security service, you may be more concerned about the number of vulnerabilities , And ignore the quality of the vulnerability , Let's make up for the basic knowledge .

except alert There are also events that can pop up

• confirm()
• prompt()
• documen.write()
• console.log

except script What other events

• img
• div
• iframe（）
• svg（）
• object（data:text/html Events can pop up xss）

https://www.jianshu.com/p/60d8c9433b37