test不要点进来

woc

xss filter的第一个问题是，没有把tag的class过滤掉。已解决。

第二个问题是没有handle style="position:fixed" 的情况。正在解决。

非常感谢。

品韭

<t121338>

ttttttttttttttttttttttttttttttttttttttttt

ttttttttttttttttttttttttttttttttttttttttt

品韭

<>品韭 <!--品韭

品韭

品韭罪大恶极 换行和斜体都失效了

罪大恶极

ttttttttttttttttttttttttttttttttttttttttt

ttttttttttttttttttttttttttttttttttttttttt

@品韭

发生了什么

+1s

好奇原来是怎么弄得，楼主可以简单介绍一下思路吗(っ・Д・)っ

@青年 <#121578>

css样式表里有一项属性是position,设定成fixed以后可以显示在浏览器窗口的指定位置，比如最上面的导航栏或者最下面的页脚

如果用户生成内容的容器没检查的话，可以覆盖掉站方原先布置好的元素

@inferior <#121593> woc

1234

<https://www.google.com>

看来混用html标记和mark down标记会有问题。。

ttttttttttttttttttttttttttttttttttttttttt

@inferior <#122239> 经不起你这样搞的，很快我就要作图片url过滤了

@thphd <#122244> 知道白帽黑客的厉害了吧，站长先生？