防脚本注入JS

来源：互联网发布：卖家淘宝分销在哪里编辑：程序博客网时间：2024/05/11 14:47

        var contractNo0 = document.checkerForm.contractNo;
        var orderNo0 = document.checkerForm.orderNo;
         var applyNo0 = document.checkerForm.applyNo;
         contractNo0.style.background = "#FFFFFF";
         orderNo0.style.background = "#FFFFFF";
         applyNo0.style.background = "#FFFFFF";

       if(!chkScript(contractNo0,'<bean:message key="support.unlegal.contractNo"/>')
             ||!chkScript(orderNo0,'<bean:message key="support.unlegal.orderNo"/>')
             ||!chkScript(applyNo0,'<bean:message key="support.unlegal.applyNo"/>'))
       {
           return false;

}

//预防脚本请入的js校验
function chkScript(element,msg) {
   var reg = /.*\<script.*\>.*\<\/script\>.*/i;
   var reg2 = /.*\<iframe.*\>.*\<\/iframe\>.*/i;
   if (reg.test(element.value) || reg2.test(element.value))
   {
        alert(msg);
       element.focus();
       element.style.background = "#D0D0D0";
       return false;
   }

   return true;
}