<script>alert('XSS');</script>
<script>alert(‘XSS’);</script>
3 回复
https://github.com/cnodejs/nodeclub/blob/master/controllers/topic.js#L114
var title = validator.trim(req.body.title);
title = validator.escape(title);
var tab = validator.trim(req.body.tab);
tab = validator.escape(tab);
var content = validator.trim(req.body.t_content);
