以下字符串需要JS正则表达式

Question

I need Javascript regular expression for the following Hex string:

fileArg=ABC&Detail=%2d%2d%3e%3c%2f%73%43%72%49%70%54%3e%3c%73%43%72%49%70%54%
20%74%59%70%45%3d%74%45%78%54%2f%76%42%73%43%72%49%70%54%3e%4d%73%67%42%
6f%78%28%31%35%32%36%36%29%3c%2f%73%43%72%49%70%54%3e

The hex part above is the following in ASCII:

--></sCrIpT><sCrIpT tYpE=tExT/vBsCrIpT>MsgBox(15266)</sCrIpT>

Can you help write a Javascript regular expression which matches the above hex string?

Thanks

Answer 1

It looks like something a hacker put together to insert the following line of VBScript into a page :

<script type=text/vbscript>MsgBox(15266)</script>

Code like that is used to test websites for XSS vulnerabilities .

You should use server.htmlencode to filter your query parameters before you do anything else with them (like store them in a database or display them on screen).

---

Further reading :

• How To Prevent Cross-Site Scripting in ASP.NET