ghtwf01
ghtwf01
首先进入注册页面,昵称为任意的javascript代码,我这里以alert(document.cookie)为例获取cookie,真实的利用是将document.cookie的内容通过http请求发送到攻击者远程服务器保存,因为cookie里面包含用户名密码,所以xss攻击成功时攻击者也就获取到了用户/管理员的账号密码 English:First enter the registration page, the nickname is any javascript code, here I take alert(document.cookie) as an example to get the cookie. The real use is to send the...
### Description    ### Link _No response_
docker yml文件配置如下: ``` services: chromadb: image: chromadb/chroma ports: - "8000:8000" restart: always volumes: - chromadb_data:/chroma/.chroma/index chatollama: environment: - VECTOR_STORE=milvus - MILVUS_URL=http://host.docker.internal:19530 - CHROMADB_URL=http://chromadb:8000 - DATABASE_URL=file:/app/sqlite/chatollama.sqlite - REDIS_HOST=redis - COHERE_API_KEY=xxxxx -...