Skip to content

Instantly share code, notes, and snippets.

@hite
Created April 11, 2011 07:10
Show Gist options
  • Save hite/913173 to your computer and use it in GitHub Desktop.
Save hite/913173 to your computer and use it in GitHub Desktop.
decodeURI() VS. decodeURIComponent()
var origin = "&callback=%3Chead%3E%3Cscript%3Ewindow.onload%3Dfunction()%7Bvar%20mailhost%3Dlocation.search.match(%2Fmailhost%3D.%2B(com%7Cnet)%26maildomain%2F)%5B0%5D.split('%3D')%5B1%5D.replace('%26maildomain'%2C'')%3Blocation.href%3D'http%3A%2F%2F'%2Bmailhost%2B'%2Fjy3%2Foptions%2Fforaddrclone.jsp'%2Blocation.search%2B'%26code%3D'%2Bdocument.body.innerHTML%3B%7D%3C%2Fscript%3E%3Chead%3E&rnd=";
//A. decodeURI(origin) = ---------------------------------------------------
var result1 = "&callback=<head><script>window.onload%3Dfunction(){var mailhost%3Dlocation.search.match(%2Fmailhost%3D.%2B(com|net)%26maildomain%2F)[0].split('%3D')[1].replace('%26maildomain'%2C'')%3Blocation.href%3D'http%3A%2F%2F'%2Bmailhost%2B'%2Fjy3%2Foptions%2Fforaddrclone.jsp'%2Blocation.search%2B'%26code%3D'%2Bdocument.body.innerHTML%3B}<%2Fscript><head>&rnd=";
//B. decodeURIComponent(origin) = ---------------------------------------------------
var result2 = "&callback=<head><script>window.onload=function(){var mailhost=location.search.match(/mailhost=.+(com|net)&maildomain/)[0].split('=')[1].replace('&maildomain','');location.href='http://'+mailhost+'/jy3/options/foraddrclone.jsp'+location.search+'&code='+document.body.innerHTML;}</script><head>&rnd=";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment