These are writeup of XSS challenge http://www.rafayhackingarticles.net/2014/06/rhainfosec-xss-challenge-2.html 回答１ Answer #1(IE only) <script> if (location.search.length=="") { location.href = location.href + "?x=<"+"img src=. onerror=alert(1)></script>…