Web Front-end
JS Tutorial
360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?
Today I found that 360 sent me an email and found that the website: Use a vulnerable JQuery version . Hackers can use this vulnerability to invade your website. This article will share with you the solution to 360 Tips [High Risk] using a vulnerable version of JQuery.
Then I went to 360 Detection to check the solution
![360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery? 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?](https://img.php.cn/upload/article/000/054/025/31b3832e157a1c358d190ffbc1fb9578-0.png?x-oss-process=image/resize,p_40)
But I felt it was of no use, and the solution of option 2 requires adding a group,
![360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery? 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?](https://img.php.cn/upload/article/000/054/025/37c513452365bca904d086bea541f1bf-1.png?x-oss-process=image/resize,p_40)
The blogger feels that whether this is a trap by 360 depends on whether you jump or not.
The blogger has released 2 solutions here, both of which can be solved.
The first type: This can only be hidden from 360, but the loophole still exists, that is
![360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery? 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?](https://img.php.cn/upload/article/000/054/025/37c513452365bca904d086bea541f1bf-2.png?x-oss-process=image/resize,p_40)
The version that deletes JQ No., 360 is not that smart yet, and can only query the version number through annotation information, and cannot scan the JQ content to determine the JQ version number.
The second type: It can also be solved with the latest version of JQ. The blogger here recommends using the second type, which can solve the JQ vulnerability.
JQ latest version download address: http://www.jb51.net/zt/jquerydown.htm
Note the version selection: jquery-2.1.4 ( Note: jquery-2.0 or above no longer supports IE 6/7/8)
We are using 1.10.2, then you can choose version 1.11, if your website uses jquery Some special functions require attention, and the code may need to be modified.
![360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery? 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?](https://img.php.cn/upload/article/000/054/025/37c513452365bca904d086bea541f1bf-3.png?x-oss-process=image/resize,p_40)
#You can look at the time, which shows that the second problem can be solved.
According to the tips from netizens, using JQ3.2.1 (currently the latest version) still cannot solve the problem.
On the contrary, when using JQ3.1.1, there is no prompt that there is a vulnerability. I don’t know if it is due to 360 or JQ. Anyway, the blogger is speechless here.
If you don’t have JQ3.1.1, you can use the JQ version of this site, which can solve the 360 vulnerability.
Related recommendations:
Summary of common vulnerabilities in JavaScript and introduction to automated detection technology
A brief discussion of session deserialization in PHP Vulnerability issues
How to attack common vulnerabilities in PHP programs
The above is the detailed content of 360 Tips [High Risk] What should I do if I use a vulnerable version of JQuery?. For more information, please follow other related articles on the PHP Chinese website!
Python vs. JavaScript: The Learning Curve and Ease of UseApr 16, 2025 am 12:12 AMPython is more suitable for beginners, with a smooth learning curve and concise syntax; JavaScript is suitable for front-end development, with a steep learning curve and flexible syntax. 1. Python syntax is intuitive and suitable for data science and back-end development. 2. JavaScript is flexible and widely used in front-end and server-side programming.
Python vs. JavaScript: Community, Libraries, and ResourcesApr 15, 2025 am 12:16 AMPython and JavaScript have their own advantages and disadvantages in terms of community, libraries and resources. 1) The Python community is friendly and suitable for beginners, but the front-end development resources are not as rich as JavaScript. 2) Python is powerful in data science and machine learning libraries, while JavaScript is better in front-end development libraries and frameworks. 3) Both have rich learning resources, but Python is suitable for starting with official documents, while JavaScript is better with MDNWebDocs. The choice should be based on project needs and personal interests.
From C/C to JavaScript: How It All WorksApr 14, 2025 am 12:05 AMThe shift from C/C to JavaScript requires adapting to dynamic typing, garbage collection and asynchronous programming. 1) C/C is a statically typed language that requires manual memory management, while JavaScript is dynamically typed and garbage collection is automatically processed. 2) C/C needs to be compiled into machine code, while JavaScript is an interpreted language. 3) JavaScript introduces concepts such as closures, prototype chains and Promise, which enhances flexibility and asynchronous programming capabilities.
JavaScript Engines: Comparing ImplementationsApr 13, 2025 am 12:05 AMDifferent JavaScript engines have different effects when parsing and executing JavaScript code, because the implementation principles and optimization strategies of each engine differ. 1. Lexical analysis: convert source code into lexical unit. 2. Grammar analysis: Generate an abstract syntax tree. 3. Optimization and compilation: Generate machine code through the JIT compiler. 4. Execute: Run the machine code. V8 engine optimizes through instant compilation and hidden class, SpiderMonkey uses a type inference system, resulting in different performance performance on the same code.
Beyond the Browser: JavaScript in the Real WorldApr 12, 2025 am 12:06 AMJavaScript's applications in the real world include server-side programming, mobile application development and Internet of Things control: 1. Server-side programming is realized through Node.js, suitable for high concurrent request processing. 2. Mobile application development is carried out through ReactNative and supports cross-platform deployment. 3. Used for IoT device control through Johnny-Five library, suitable for hardware interaction.
Building a Multi-Tenant SaaS Application with Next.js (Backend Integration)Apr 11, 2025 am 08:23 AMI built a functional multi-tenant SaaS application (an EdTech app) with your everyday tech tool and you can do the same. First, what’s a multi-tenant SaaS application? Multi-tenant SaaS applications let you serve multiple customers from a sing
How to Build a Multi-Tenant SaaS Application with Next.js (Frontend Integration)Apr 11, 2025 am 08:22 AMThis article demonstrates frontend integration with a backend secured by Permit, building a functional EdTech SaaS application using Next.js. The frontend fetches user permissions to control UI visibility and ensures API requests adhere to role-base
JavaScript: Exploring the Versatility of a Web LanguageApr 11, 2025 am 12:01 AMJavaScript is the core language of modern web development and is widely used for its diversity and flexibility. 1) Front-end development: build dynamic web pages and single-page applications through DOM operations and modern frameworks (such as React, Vue.js, Angular). 2) Server-side development: Node.js uses a non-blocking I/O model to handle high concurrency and real-time applications. 3) Mobile and desktop application development: cross-platform development is realized through ReactNative and Electron to improve development efficiency.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

Dreamweaver Mac version
Visual web development tools

PhpStorm Mac version
The latest (2018.2.1) professional PHP integrated development tool

SublimeText3 English version
Recommended: Win version, supports code prompts!

DVWA
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),





