hoshikuzu | star_dust ã®æ›¸æ–Ž InternetExplorer6::baseè¦ç´ ã®style属性ãŒå…¨è¦ç´ ã«åŠ¹ãã®ã§JavaScriptも記述ã—放題下ã®ã‚½ãƒ¼ã‚¹ã§ãƒãƒ¼ã‚«ãƒ«ã«HTMLファイルを作りIE6ã§é–‹ã。一行目ã¯ãŠã¾ã˜ãªã„ãªã®ã§çœç•¥ã—ãªã„。imgè¦ç´ ã¨ã‹brè¦ç´ ã¨ã‹ãŒæ³£ã‘る。 <!-- saved from url=(0014)about:internet --> <html> <head> <title>nandakore</title> </head> <body> <base id="b00" style="width:expression(setTimeout(this.innerText,0))"> <pre> resizeTo (400, 400); </pre> <img> document.title='areare'; </img> <br> var hoge = 'foo'; </br> <blockquote> window.status = hoge; </blockquote> </body> </html
IE ã«ãŠã‘ã‚‹ "expression" ã®éŽå‰°æ¤œå‡ºã«ã‚ˆã‚‹ XSS ã® èª˜å› 
{{#tags}}- {{label}}
{{/tags}}