XSS challenges bypass the protection strategy for XSS injection

closed input Inject js label

closed value Inject Events

One 、 Stage #5 Solution to limit input length

Stage #5 Address ： XSS Challenges (by yamagata21) - Stage #5

F12 View source code

The text box is defined in the code , The type is text, Maximum allowed input 15 Characters We try to enter in order 26 English letters , Input 15 You can't continue to input English letters ：abcdefghijklmno

double-click maxlength It's about , It is amended as follows 150

After modification, you can continue to enter characters . We type in XSS Attack script ：