FernandoZhuang

public ActionResult Register(){
        string user_name = Request.Form["regname"];
        string user_pwd = Request.Form["regpass"];
        string user_repwd = Request.Form["reregpass"];

        if (user_name.Trim() == "" || user_pwd.Trim() == "")
        {
            return Redirect("/");
        }
        if(user_pwd != user_repwd)

FernandoZhuang

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;

namespace ChildChat.Models
{
    public class Conversation
    {
        public Conversation()

FernandoZhuang

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Data.Entity;

namespace ChildChat.Models
{
    public class ChatContext:DbContext
    {

FernandoZhuang

<!--Vulnerbility注入点 <label><h4>  </h4></label>  -->
<!--input输入 alert(1)  -->
<label><h4>alert（1）</h4></label>

FernandoZhuang

<!--Vulnerbility注入点：<label><h4><input type="text" name="test" value="1">  -->
<!--Inject输入: 1" onfocus="alert(1)" autofocus="true"  -->
<label><h4><input type="text" name="test" value="1" onfocus="alert(1)" autofocus="true"></h4></label>

FernandoZhuang

<!--Vulnerbility漏洞: <label><h4><a href="javascript:2333\" onfocus=\"alert(1)\" autofocus=\"true">不能闭合引号</a></h4></label> -->
<!--Injection输入:alert(1)-->
<label><h4><a href="javascript:alert(1)">不能闭合引号</a></h4></label>

FernandoZhuang

<!--Vulnerbility注入点: <label><h4><input type="text" name="test" value=""  2333" > </h4></label>  -->
<!--Inject输入: onfocus="alert(1)" autofocus="true" -->
<label><h4><input type="text" name="test" value=""  onfocus="alert(1)" autofocus="true" > </h4></label>

FernandoZhuang

<!--Vulnerbility注入点:
          <label><h4>
          <script type="text/javascript">
              var you = 'iloveyou';
              document.write('2333''+','+you);
          </script>
          </h4></label>
-->
<!--Inject输入: 233');alert(1);//'+','+you); -->
          <label><h4>

FernandoZhuang

<!--Vulnerbility注入点:  输入的是2333"alert(1)
<label><h4 id="twoH4">
  <script type="text/javascript">
  var two = document.getElementById('twoH4');
  var two_value = "2333alert(1)";
  two.innerHTML=two_value;
  </script>
</h4></label>
-->
<!--Inject输入: </script> <script>alert(1)</script>-->

FernandoZhuang

#include <algorithm>

bool Cmp(string A, string B){
  return A+B<B+A;
}

int main(){
  ……
  sort(str,str+len,Cmp);
  ……