Shopify background XSS storage vulnerability

Storage type XSS Loophole

Storage type XSS, It's also called persistent XSS, Mainly is to XSS Code sent to the server （ Whether it's a database 、 Memory or file system ）, Then the next time you request a page, you don't have to bring XSS Code. .

The most typical is the message board XSS.

The user submitted an entry containing XSS Code message to database .

When the target user queries the message , The content of those messages will be loaded after parsing from the server .

The browser found XSS Code , Just as normal HTML and JS Parsing performed ,XSS The attack happened .

Video content

Shopify backstage XSS Memory vulnerability

1080P Super clear

The official account platform itself will compress the material two times. , It will cause the picture not clear and so on .

If you need to check the super clear 1080P Video version , The following options are available 2 There are two ways to view .

Tencent video is used as video content storage point in China , You can customize the selection of super clear 1080P.

Link address ：https://v.qq.com/x/page/f3271v2nn6i.html

If Tencent video access is abnormal or the page does not exist , You can visit abroad Youtube

The site to watch . Foreign sites as backup sites also support ultra clear 1080P Watch

You can choose either way .

Foreign backup video sites ：

Link address ：https://www.youtube.com/watch?v=vxtLsZlPkg4

Other instructions

This video has been edited and optimized based on the live content , Remove extra noise and skip frame pictures

Add titles for comfort , Improve the ornamental .

More technology will be updated later 、 entertainment 、 Life videos and content , If you have any other requirements or suggestions, please send

E-mail Communicate together , Generally, I will reply in time when I see it ~

remarks ： This content is only for technical exchange and content storage ！！！

remarks ： This content is only for technical exchange and content storage ！！！