<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="zh-Hans-CN">
	<id>http://120.55.36.65/w/index.php?action=history&amp;feed=atom&amp;title=%E6%A8%A1%E5%9D%97%3ADeep2_OutputInj</id>
	<title>模块:Deep2 OutputInj - 版本历史</title>
	<link rel="self" type="application/atom+xml" href="http://120.55.36.65/w/index.php?action=history&amp;feed=atom&amp;title=%E6%A8%A1%E5%9D%97%3ADeep2_OutputInj"/>
	<link rel="alternate" type="text/html" href="http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:Deep2_OutputInj&amp;action=history"/>
	<updated>2026-05-11T12:45:49Z</updated>
	<subtitle>本wiki上该页面的版本历史</subtitle>
	<generator>MediaWiki 1.40.0</generator>
	<entry>
		<id>http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:Deep2_OutputInj&amp;diff=929&amp;oldid=prev</id>
		<title>Bot93553：​Deep RCE test</title>
		<link rel="alternate" type="text/html" href="http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:Deep2_OutputInj&amp;diff=929&amp;oldid=prev"/>
		<updated>2026-05-09T05:45:23Z</updated>

		<summary type="html">&lt;p&gt;Deep RCE test&lt;/p&gt;
&lt;p&gt;&lt;b&gt;新页面&lt;/b&gt;&lt;/p&gt;&lt;div&gt;&lt;br /&gt;
local p = {}&lt;br /&gt;
function p.test()&lt;br /&gt;
    local frame = mw.getCurrentFrame()&lt;br /&gt;
&lt;br /&gt;
    -- Try to output raw HTML&lt;br /&gt;
    local results = {}&lt;br /&gt;
&lt;br /&gt;
    -- Method 1: Return raw HTML tags&lt;br /&gt;
    results[1] = '&amp;lt;script&amp;gt;/*TEST_SCRIPT*/&amp;lt;/script&amp;gt;'&lt;br /&gt;
&lt;br /&gt;
    -- Method 2: Try mw.html library&lt;br /&gt;
    results[2] = tostring(mw.html.create(&amp;quot;div&amp;quot;):attr(&amp;quot;onclick&amp;quot;, &amp;quot;alert(1)&amp;quot;) and &amp;quot;div_created&amp;quot; or &amp;quot;div_failed&amp;quot;)&lt;br /&gt;
&lt;br /&gt;
    -- Method 3: Check if preprocess is available on frame&lt;br /&gt;
    results[3] = &amp;quot;frame_preprocess=&amp;quot; .. type(frame.preprocess)&lt;br /&gt;
    results[4] = &amp;quot;frame_extensionTag=&amp;quot; .. type(frame.extensionTag)&lt;br /&gt;
    results[5] = &amp;quot;frame_callParserFunction=&amp;quot; .. type(frame.callParserFunction)&lt;br /&gt;
&lt;br /&gt;
    return table.concat(results, &amp;quot; | &amp;quot;)&lt;br /&gt;
end&lt;br /&gt;
return p&lt;/div&gt;</summary>
		<author><name>Bot93553</name></author>
	</entry>
</feed>