Xherlock - XSS-labs Less 11-16 的评论
type: channel
link: http://xherlock.top/index.php/archives/1249/
description: XSS-labs Less 11-16Less 11 referer信息和Less 10一样，先去掉hidden提交值找绕过点，发现t_sort的value可以拼接但是被HTML实体进行了编码根...