??????????????

?????? ??????????????

????????????????????????????????? <??tiehua ??> ??

???????????????????????????tiehua??????????е?tiehua????<??>??????????????

????&lt&quot&gt&apos ???δ???????????????????xss????????????bug????

?????????????????????<img onerror=??alert(123)?? src=http://xxx.com>?????

???????????г?????????????js??????????????????xss????????????bug????

?????? ???????????????

????????????????磺

????http://mall.taobao.com/?ad_id=&am_id=&cm_id=&pm_id=

???????????????4????????????????????????????????????????????????????????????????

?????????磺

????http://mall.taobao.com/?ad_id=<??tiehua??>&am_id=&cm_id=&pm_id=

??????????????????????????????????bug??????????????????????xss????????????

???????????xss???????????????????????????

??????й??????

???????????

?????? Paros??????

?????? Acunetix.Web.Vulnerability.Scanner (???????)

??????д?????????

?????????????????????xss???????????????????????磺

????<span>$!productName</span>

???????????????????????????????淶???

????<span> $!stringEscapeUtil.escapeHtml ($!productName)</span>

??????????????????????????????淶?????????????

??????????????????????????????д?????????о?????????????淶??д?????????xss?????