ForestBlog
ForestBlog copied to clipboard
XSS attacks occur when user profile pictures are updated
1.Edit user information and save it
2.The profile picture address in the packet capture request is changed
payload:1" onerror=alert('xss') class="1
3.Any place where the user's avatar is loaded triggers a Cross Site Scripting
4.User information should be added and modified with XSS detection
src/main/java/com/liuyanzhao/ssm/blog/controller/admin/AdminController.java
