{"action":"closed","issue":{"url":"https://api.github.com/repos/hustcc/PTHospital.chrome/issues/26","repository_url":"https://api.github.com/repos/hustcc/PTHospital.chrome","labels_url":"https://api.github.com/repos/hustcc/PTHospital.chrome/issues/26/labels{/name}","comments_url":"https://api.github.com/repos/hustcc/PTHospital.chrome/issues/26/comments","events_url":"https://api.github.com/repos/hustcc/PTHospital.chrome/issues/26/events","html_url":"https://github.com/hustcc/PTHospital.chrome/issues/26","id":154770031,"number":26,"title":"反屏蔽漏洞","user":{"login":"facetothefate","id":4744394,"avatar_url":"https://avatars.githubusercontent.com/u/4744394?v=3","gravatar_id":"","url":"https://api.github.com/users/facetothefate","html_url":"https://github.com/facetothefate","followers_url":"https://api.github.com/users/facetothefate/followers","following_url":"https://api.github.com/users/facetothefate/following{/other_user}","gists_url":"https://api.github.com/users/facetothefate/gists{/gist_id}","starred_url":"https://api.github.com/users/facetothefate/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/facetothefate/subscriptions","organizations_url":"https://api.github.com/users/facetothefate/orgs","repos_url":"https://api.github.com/users/facetothefate/repos","events_url":"https://api.github.com/users/facetothefate/events{/privacy}","received_events_url":"https://api.github.com/users/facetothefate/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-05-13T18:10:10Z","updated_at":"2016-05-14T02:50:57Z","closed_at":"2016-05-14T02:50:57Z","body":"以下均在http://www.yodak.net/templets/js/fkGoogle.js \r\n下用控制台测试。\r\n\r\n**没有对mask的内容进行校验：**\r\n修改子节点\r\n```js\r\nvar mask = document.getElementById(\"89HYUX3I2Q3O6A6\")\r\nmask.innerHTML = \"\";\r\n\r\n```\r\n结果：\r\n![image](https://cloud.githubusercontent.com/assets/4744394/15257413/3558d7b2-1914-11e6-8a0f-d456a97354b9.png)\r\n\r\n可以再插入一张完全白色的image，改成100% 100%\r\n这样就完全看不到了。\r\n\r\n**没有检查父节点：**\r\n\r\n把mask装到一个不在dom上的节点里\r\n```js\r\nvar container = document.createElement('div')\r\ncontainer.appendChild(mask);\r\n```\r\n\r\n结果：\r\n\r\n如图，dom里不再有mask：\r\n![image](https://cloud.githubusercontent.com/assets/4744394/15257820/47512ddc-1916-11e6-8b84-cd75abb05287.png)\r\n\r\nmask被屏蔽\r\n\r\n**因为位置固定：**\r\n插入一张空白image 悬在mask的上面。找到mask，同级在后面插入一个相同大小z-index元素 盖上\r\n\r\n添加一个如图的元素即可：\r\n![image](https://cloud.githubusercontent.com/assets/4744394/15258126/cc2529f4-1917-11e6-9a1d-7795b5dcec75.png)\r\n\r\n\r\n"}}