JSFiddle - React, Tailwind, and code Playground

by zjcqoo

HTML

<img src="*" onerror="console.log('xss')" />

JavaScript

function hookEvent(onevent) {
    document.addEventListener(onevent.substr(2), function(e) {
        var element = e.target;
        if (element.nodeType != Node.ELEMENT_NODE) {
            return;
        }
        var code = element.getAttribute(onevent);
        if (code && /xss/.test(code)) {
            element[onevent] = null;
            console.log('拦截可疑事件:', code);
        }
    }, true);
}

console.time('耗时');
for (var k in document) {
    if (/^on/.test(k)) {
        //console.log('监控:', k);
        hookEvent(k);
    }
}
console.timeEnd('耗时');