Django之基于iframe的ajax伪造

<div class="markdown-here-wrapper" data-md-url="https://i.cnblogs.com/EditPosts.aspx?opt=1"&gt;
<blockquote style="margin: 1.2em 0px; border-left: 4px solid #dddddd; padding: 0px 1em; color: #777777; quotes: none;">
<p style="margin: 0px 0px 1.2em !important; font-size: 16px; line-height: 1.75em; padding-right: 0.5em; padding-left: 0.5em;">IFRAME是HTML标签，作用是文档中的文档，或者浮动的框架(FRAME)。iframe元素会创建包含另外一个文档的内联框架

页面刷新的信息获取更新，也就是局部刷新。

display: block; overflow: auto; overflow-x: auto; color: #333333; background: #f8f8f8; text-size-adjust: none;">
normal;"><normal;">form = = = >
        normal;"><normal;">iframe =display: none"  = = = =>normal;">normal;">iframe>
        normal;"><normal;">input = = />
        normal;"><normal;">input = = />
        normal;"><normal;">input = />
    {% csrf_token %}
normal;">normal;">form>

函数为

display: block; overflow: auto; overflow-x: auto; color: #333333; background: #f8f8f8; text-size-adjust: none;">
 arams">() {
     str_json = $().contents().find().text();   内容
      obj = .parse(str_json);
　　　.log(obj.message)
}

函数：

display: block; overflow: auto; overflow-x: auto; color: #333333; background: #f8f8f8; text-size-adjust: none;">
 arams">(req):
     req.method == :
         render(req,)
     req.method==:
        ret = {: }
         HttpResponse(json.dumps(ret))

imsI+PC9wPjxwPmFqYXjnmoTnkIblv7XmmK/kuI3ov5vooYzmtY/op4jlmajpobXpnaLl iLfmlrDnmoTkv6Hmga/ojrflj5bmm7TmlrDvvIzkuZ/lsLHmmK/lsYDpg6jliLfmlrDjgII8L3A+ PHA+6YKj5LmI5Lyq6YCgYWpheOeahOaWueW8j+WNs+S4uuWwhuWQkeacjeWKoeerr+WPkemAgeiv t+axgui/lOWbnueahOaVsOaNrui/lOWbnuWIsGlmcmFtZeS4re+8jOWGjeS9v+eUqGpz5LuOaWZy YW1l5Lit55qE5paH5qGj5Lit5Y+W5Ye65pWw5o2u5L2/55So44CCPC9wPjxwPuWFt+S9k+aWueW8 j+eugOWNleS4vuS+i++8mjwvcD48cD5gYGBodG1sPC9wPjxwcmU+Jmx0O2Zvcm0gYWN0aW9uPSIv bG9naW4vIiBtZXRob2Q9InBvc3QiIHRhcmdldD0iaWZyYW1lXzEiICZndDs8YnI+ICAgICAgICAm bHQ7aWZyYW1lIHN0eWxlPSJkaXNwbGF5OiBub25lIiAgaWQ9ImlmcmFtZV8xIiBuYW1lPSJpZnJh bWVfMSIgc3JjPSIiIG9ubG9hZD0ibG9hZElmcmFtZSgpOyImZ3Q7Jmx0Oy9pZnJhbWUmZ3Q7PGJy PiAgICAgICAgJmx0O2lucHV0IHR5cGU9InRleHQiIG5hbWU9InVzZXIiIC8mZ3Q7PGJyPiAgICAg ICAgJmx0O2lucHV0IHR5cGU9InBhc3N3b3JkIiBuYW1lPSJwd2QiIC8mZ3Q7PGJyPiAgICAgICAg Jmx0O2lucHV0IHR5cGU9InN1Ym1pdCIgLyZndDs8YnI+ICAgIHslIGNzcmZfdG9rZW4gJX08YnI+ Jmx0Oy9mb3JtJmd0OzwvcHJlPjxwPmBgYDwvcD48cD5vbmxvYWTlh73mlbDkuLo8L3A+PHA+YGBg amF2YXNjcmlwdDwvcD48cHJlPmZ1bmN0aW9uIGxvYWRJZnJhbWUoKSB7PGJyPiAgICB2YXIgc3Ry X2pzb24gPSAkKCcjaWZyYW1lXzEnKS5jb250ZW50cygpLmZpbmQoJ2JvZHknKS50ZXh0KCk7ICAg Ly/mib7liLBpZnJhbWXkuK3nmoTlhoXlrrk8YnI+ICAgICB2YXIgb2JqID0gSlNPTi5wYXJzZShz dHJfanNvbik7PGJyPuOAgOOAgOOAgGNvbnNvbGUubG9nKG9iai5tZXNzYWdlKTxicj59PC9wcmU+ PHA+YGBgPC9wPjxwPnB5dGhvbuinhuWbvuWHveaVsO+8mjwvcD48cD5gYGBweXRob248L3A+PHBy ZT5kZWYgbG9naW4ocmVxKTo8YnI+ICAgIGlmIHJlcS5tZXRob2QgPT0gJ0dFVCc6PGJyPiAgICAg ICAgcmV0dXJuIHJlbmRlcihyZXEsJ2FwcDEvbG9naW4uaHRtbCcpPGJyPiAgICBpZiByZXEubWV0 aG9kPT0nUE9TVCc6PGJyPiAgICAgICAgcmV0ID0geydtZXNzYWdlJzogJ2FqYXjkvKrpgKDmiJDl ip8nfTxicj4gICAgICAgIHJldHVybiBIdHRwUmVzcG9uc2UoanNvbi5kdW1wcyhyZXQpKTwvcHJl PjxwPmBgYDwvcD4=">​