Li-Fan Chen
says to
YSITD
單純的HTML injection也可以阿