漏洞：Client ReDos From Regex Injection

漏洞描述： 掃描漏洞如下： 代碼： // In IE6, the hash fragment and search params are incorrect if the     // fragment contains `?`.     getSearch: function() {       var match = this.location.href.replace(/#.*/, '').

>>阅读原文<<