87,907
社区成员
发帖
与我相关
我的任务
分享
aa.js:
function test(){
var aa= "<script>alert(11);</script>";
var insertInto = document.getElementById('input');
var insertDiv = document.createElement('div');
insertDiv.innerHTML= aa;
insertInto.appendChild(insertDiv);
}
<script src="aa.js"></script>
<span id = "input">aaaaa</span>
<input type = "button" value = "test" onclick = "test();"/>
function test(){
var insertInto = document.getElementById('input');
var insertDiv = document.createElement('div');
var s = document.createElement("script");
s.text="alert(11);";
insertDiv.appendChild(s);
insertInto.appendChild(insertDiv);
alert(insertInto.innerHTML)
}
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Test Page</title>
<meta name="generator" content="editplus" />
<meta name="author" content="" />
<meta name="keywords" content="" />
<meta name="description" content="" />
<style type="text/css">
</style>
<script type="text/javascript">
<!--
function test(){
var aa= "alert(11);";
var script = document.createElement('script');
script.text = aa;
document.body.appendChild(script);
}
//-->
</script>
</head>
<body>
</body>
<script type="text/javascript">
<!--
test();
//-->
</script>
</html>
var aa= "<script>alert(11);</"+"script>"; //script标签中不允许出现script标签,所以需要用字符串连接
var aa= "<script>alert(11);</script>";
var aa= "<script>alert(11);<\/script>";
<html>
<head>
<script language="javascript">
function test() {
var aa = "alert(11);";
var insertInto = document.getElementById('input');
var insertDiv = document.createElement('div');
insertDiv.innerHTML = eval(aa);
insertInto.appendChild(insertDiv);
}
</script>
</head>
<body>
<span id="input">aaaaa</span>
<input type="button" value="test" onclick="test();" />
</body>
</html>