stonexer

// Theory
// http://htmlpurifier.org/live/smoketests/xssAttacks.php 
// https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

// A full collection of HTML5 related XSS attack vectors: 
// https://github.com/cure53/H5SC https://raw.githubusercontent.com/cure53/H5SC/master/vectors.txt

// Short list
<script>alert("XSS: script tag")</script>
<script src="http://hackers-site.powertofly.com"></script>

stonexer

Machine({
  id: '云客服招募',
  initial: 'INIT',
  context: {
    user: null,
  },
  states: {
    /**
     * 初始化（登录）
     */

stonexer

  // Available variables:
  // - Machine
  // - interpret
  // - assign
  // - send
  // - sendParent
  // - spawn
  // - raise
  // - actions

stonexer

function countReactFibers() {
  const rootContainer = document.getElementById('root');
  const root = rootContainer._reactRootContainer;
  const internalRoot = root._internalRoot;

  let fiberCount = 0;
  let elementCount = 0;

  function travelFibers(fiberNode) {