360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?-JS Tutorial-php.cn

Home

Web Front-end

JS Tutorial

360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?

小云云

Dec 26, 2017 pm 03:19 PM

useexistloopholes

Today I found that 360 sent me an email and found that the website: Use a vulnerable JQuery version . Hackers can use this vulnerability to invade your website. This article will share with you the solution to 360 Tips [High Risk] using a vulnerable version of JQuery.

Then I went to 360 Detection to check the solution

360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?

But I felt it was of no use, and the solution of option 2 requires adding a group,

360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?

The blogger feels that whether this is a trap by 360 depends on whether you jump or not.

The blogger has released 2 solutions here, both of which can be solved.

The first type: This can only be hidden from 360, but the loophole still exists, that is

360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?

The version that deletes JQ No., 360 is not that smart yet, and can only query the version number through annotation information, and cannot scan the JQ content to determine the JQ version number.

The second type: It can also be solved with the latest version of JQ. The blogger here recommends using the second type, which can solve the JQ vulnerability.

JQ latest version download address: http://www.jb51.net/zt/jquerydown.htm

Note the version selection: jquery-2.1.4 ( Note: jquery-2.0 or above no longer supports IE 6/7/8)

We are using 1.10.2, then you can choose version 1.11, if your website uses jquery Some special functions require attention, and the code may need to be modified.

360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?

#You can look at the time, which shows that the second problem can be solved.

According to the tips from netizens, using JQ3.2.1 (currently the latest version) still cannot solve the problem.

On the contrary, when using JQ3.1.1, there is no prompt that there is a vulnerability. I don’t know if it is due to 360 or JQ. Anyway, the blogger is speechless here.

If you don’t have JQ3.1.1, you can use the JQ version of this site, which can solve the 360 vulnerability.

Related recommendations:

Summary of common vulnerabilities in JavaScript and introduction to automated detection technology

A brief discussion of session deserialization in PHP Vulnerability issues

How to attack common vulnerabilities in PHP programs

The above is the detailed content of 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?. For more information, please follow other related articles on the PHP Chinese website!

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Python vs. JavaScript: Which Language Should You Learn?May 03, 2025 am 12:10 AM

Choosing Python or JavaScript should be based on career development, learning curve and ecosystem: 1) Career development: Python is suitable for data science and back-end development, while JavaScript is suitable for front-end and full-stack development. 2) Learning curve: Python syntax is concise and suitable for beginners; JavaScript syntax is flexible. 3) Ecosystem: Python has rich scientific computing libraries, and JavaScript has a powerful front-end framework.

JavaScript Frameworks: Powering Modern Web DevelopmentMay 02, 2025 am 12:04 AM

The power of the JavaScript framework lies in simplifying development, improving user experience and application performance. When choosing a framework, consider: 1. Project size and complexity, 2. Team experience, 3. Ecosystem and community support.

The Relationship Between JavaScript, C , and BrowsersMay 01, 2025 am 12:06 AM

Introduction I know you may find it strange, what exactly does JavaScript, C and browser have to do? They seem to be unrelated, but in fact, they play a very important role in modern web development. Today we will discuss the close connection between these three. Through this article, you will learn how JavaScript runs in the browser, the role of C in the browser engine, and how they work together to drive rendering and interaction of web pages. We all know the relationship between JavaScript and browser. JavaScript is the core language of front-end development. It runs directly in the browser, making web pages vivid and interesting. Have you ever wondered why JavaScr

Node.js Streams with TypeScriptApr 30, 2025 am 08:22 AM

Node.js excels at efficient I/O, largely thanks to streams. Streams process data incrementally, avoiding memory overload—ideal for large files, network tasks, and real-time applications. Combining streams with TypeScript's type safety creates a powe

Python vs. JavaScript: Performance and Efficiency ConsiderationsApr 30, 2025 am 12:08 AM

The differences in performance and efficiency between Python and JavaScript are mainly reflected in: 1) As an interpreted language, Python runs slowly but has high development efficiency and is suitable for rapid prototype development; 2) JavaScript is limited to single thread in the browser, but multi-threading and asynchronous I/O can be used to improve performance in Node.js, and both have advantages in actual projects.

The Origins of JavaScript: Exploring Its Implementation LanguageApr 29, 2025 am 12:51 AM

JavaScript originated in 1995 and was created by Brandon Ike, and realized the language into C. 1.C language provides high performance and system-level programming capabilities for JavaScript. 2. JavaScript's memory management and performance optimization rely on C language. 3. The cross-platform feature of C language helps JavaScript run efficiently on different operating systems.

Behind the Scenes: What Language Powers JavaScript?Apr 28, 2025 am 12:01 AM

JavaScript runs in browsers and Node.js environments and relies on the JavaScript engine to parse and execute code. 1) Generate abstract syntax tree (AST) in the parsing stage; 2) convert AST into bytecode or machine code in the compilation stage; 3) execute the compiled code in the execution stage.

The Future of Python and JavaScript: Trends and PredictionsApr 27, 2025 am 12:21 AM

The future trends of Python and JavaScript include: 1. Python will consolidate its position in the fields of scientific computing and AI, 2. JavaScript will promote the development of web technology, 3. Cross-platform development will become a hot topic, and 4. Performance optimization will be the focus. Both will continue to expand application scenarios in their respective fields and make more breakthroughs in performance.

See all articles