XSS attack with javascript in img src attribute

后端 未结 3 1780
离开以前
离开以前 2021-02-07 11:31

Some older browsers are vulnerable to XSS attacks as such


Current versions of IE, FF, Chrome are

3条回答
  •  -上瘾入骨i
    2021-02-07 12:08

    No. Image data is never executed as JavaScript. The if the src is a JavaScript link, the JavaScript is executed, but the fundamental reading of data that comes from a request to the src does not involve JavaScript.

提交回复
热议问题