ASP.NET\u540e\u53f0\u6267\u884cJS\u4ee3\u7801<\/title><\/head><body><\/p>\n<h1 style=\"display:none\">ASP.NET\u540e\u53f0\u6267\u884cJS\u4ee3\u7801<\/h1>\n<div>\n<p>\n<font size=\"2\">1. \u7528Response.Write\u65b9\u6cd5<\/font><\/p>\n<p><font size=\"2\">\u4ee3\u7801\u5982\u4e0b\uff1a<br \/>\nResponse.Write("<script type=’text\/javascript’>alert("XXX");<\/script>");<br \/>\n\u6b64\u65b9\u6cd5\u7f3a\u9677\u5c31\u662f\u4e0d\u80fd\u8c03\u7528\u811a\u672c\u6587\u4ef6\u4e2d\u7684\u81ea\u5b9a\u4e49\u7684\u51fd\u6570\uff0c\u53ea\u80fd\u8c03\u7528\u5185\u90e8\u51fd\u6570\uff0c\u5177\u4f53\u8c03\u7528\u81ea\u5b9a\u4e49\u7684\u51fd\u6570\u53ea\u80fd\u5728Response.Write\u5199\u4e0a\u51fd\u6570\u5b9a \u4e49\uff0c\u6bd4\u5982<br \/>\nResponse.Write("<script type=’text\/javascript’>function myfun(){}<\/script>");<\/font><\/p>\n<p><font size=\"2\">2.\u7528ClientScript\u7c7b<\/font><\/p>\n<p><font size=\"2\">\u4ee3\u7801\u5982\u4e0b\uff1a\u5728\u60f3\u8c03\u7528\u67d0\u4e2ajavascript\u811a\u672c\u51fd\u6570\u7684\u5730\u65b9\u6dfb\u52a0\u4ee3\u7801\uff0c\u6ce8\u610f\u8981\u4fdd\u8bc1MyFun\u5df2\u7ecf\u5728\u811a\u672c\u6587\u4ef6\u4e2d\u5b9a\u4e49\u8fc7\u4e86\u3002<br \/>\nClientScript.RegisterStartupScript(ClientScript.GetType(), "myscript", "<script>MyFun();<\/script>");<br \/>\n\u8fd9\u4e2a\u65b9\u6cd5\u6bd4Response.Write\u66f4\u65b9\u4fbf\u4e00\u4e9b\uff0c\u53ef\u4ee5\u76f4\u63a5\u8c03\u7528\u811a\u672c\u6587\u4ef6\u4e2d\u7684\u81ea\u5b9a\u4e49\u51fd\u6570\u3002<\/font><\/p>\n<p><font size=\"2\">3.\u666e\u901a\u7684\u6dfb\u52a0\u63a7\u4ef6\u7684Attributes\u5c5e\u6027<\/font><\/p>\n<p><font size=\"2\">\u5bf9\u4e8e\u666e\u901a\u6309\u94ae\u5c31\u662f\uff1aButton1.Attributes.Add("onclick","MyFun();");<br \/>\n\u53ea\u80fd\u5728Onload\u4e2d\u6216\u7c7b\u4f3c\u4e8eonload\u7684\u521d\u59cb\u5316\u8fc7\u7a0b\u4e2d\u6dfb\u52a0\u624d\u6709\u6548\u3002\u800c\u4e14\u662f\u5148\u6267\u884c\u811a\u672c\u51fd\u6570\uff0c\u65e0\u6cd5\u6539\u53d8\u6267\u884c\u987a\u5e8f\u3002<\/font><\/p>\n<p><font size=\"2\">\u6ce8\u610f\uff0c\u4ee5\u4e0a\u6240\u6709\u65b9\u6cd5\u4e2d\uff0c\u540e\u53f0\u4ee3\u7801\u90fd\u4e0d\u80fd\u6709\u8f6c\u5316\u5f53\u524d\u9875\u7684\u4ee3\u7801\uff0c\u6bd4\u5982Redirect\u7b49\uff0c\u8981\u628a\u8f6c\u9875\u4ee3\u7801\u653e\u5728\u811a\u672c\u91cc\u9762<\/font><\/p>\n<p><font size=\"2\">4.\u5982\u679c\u8981\u5728\u9875\u9762\u52a0\u8f7d\u7684\u65f6\u5019\u6267\u884cjs\u4ee3\u7801\uff0c\u53ef\u4ee5\u5728\u524d\u53f0\u653e\u4e00\u4e2a\u94a9\u5b50\uff0c\u7136\u540e\u7528\u540e\u53f0\u4ee3\u7801\u5f80\u91cc\u9762\u5199js\u4ee3\u7801\u3002\u5982\uff1a<br \/>\n\u540e\u53f0\uff1a<br \/>\ninit.InnerHtml = "<script type=\\"text\/javascript\\">alert(‘yes’);<\/script>";<br \/>\n\u524d\u53f0\uff1a<br \/>\n<div id="init" style="display:none" runat=server>\u5728\u540e\u53f0\u5199js\u4ee3\u7801\uff0c\u505a\u4e3a\u6267\u884cjs\u4ee3\u7801\u7684\u94a9\u5b50<\/div><\/font><\/p>\n<\/div>\n<p><\/body><\/html><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ASP.NET\u540e\u53f0\u6267\u884cJS\u4ee3\u7801 ASP.NET\u540e\u53f0\u6267\u884cJS\u4ee3\u7801 1. \u7528Response.Write\u65b9\u6cd5 \u4ee3\u7801 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-1242","post","type-post","status-publish","format-standard","hentry","category-code_related"],"_links":{"self":[{"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/comments?post=1242"}],"version-history":[{"count":0,"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/posts\/1242\/revisions"}],"wp:attachment":[{"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/media?parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/categories?post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kyle.ai\/blog\/wp-json\/wp\/v2\/tags?post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":1242,"date":"2010-08-10T11:24:00","date_gmt":"2010-08-10T03:24:00","guid":{"rendered":""},"modified":"2010-08-10T11:24:00","modified_gmt":"2010-08-10T03:24:00","slug":"","status":"publish","type":"post","link":"https:\/\/kyle.ai\/blog\/1242.html","title":{"rendered":"ASP.NET\u540e\u53f0\u6267\u884cJS\u4ee3\u7801"},"content":{"rendered":"