.*?<\/script>/gi, //gi, /on\w+\s*=/gi, // onclick, onload等 /.*?<\/iframe>/gi, /.*?<\/frame>/gi, /expression\(.*?\)/gi, //gi, /.*?<\/meta>/gi, /.*?<\/link>/gi, /.*?<\/style>/gi ]; var filtered = str; patterns.forEach(function(pattern) { filtered = filtered.replace(pattern, ''); }); // HTML实体编码 return filtered .replace(/&/g, '&') .replace(//g, '>') .replace(/"/g, '"') .replace(/'/g, '''); } // 对所有表单输入进行监听 document.addEventListener('DOMContentLoaded', function() { // 监控所有输入框 var inputs = document.querySelectorAll('input[type="text"], input[type="password"], textarea'); inputs.forEach(function(input) { input.addEventListener('input', function(e) { this.value = filterXSS(this.value); }); input.addEventListener('blur', function(e) { this.value = filterXSS(this.value); }); }); // 处理URL参数 function sanitizeURLParams() { var urlParams = new URLSearchParams(window.locations.search); urlParams.forEach(function(value, key) { if (value.indexOf('<') > -1 || value.indexOf('>') > -1 || value.indexOf('') > -1) { // 重定向到安全页面或清除参数 window.locations.href = window.locations.pathname; } }); } sanitizeURLParams(); }); (function () { var hm = document.createElement("script"); hm.src="/hm.js?6dfc33d0d4e12288adbd48920d2c65daar"; var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hm, s); })();