divclass="comment""你的评论在这里"onmouseover="...
imgsrc=xonerror=alert(1)...
scriptalert(1)/script...
<p>web.config:</p><p><add name="ApplicationServices" connectionString="<strong>data source=.\steven</strong>;Integrated Security=SSPI;AttachDBFilename=|DataDirectory|aspnetdb.mdf;User Instance=true" providerName="System.Data.SqlClient"/></p><span style="white-space: pre;"> </span><add name="App.DataAccess.ConnectionStringMain" providerName="System.Data.SqlClient" connectionString="<strong>Data Source=192.168.2.105\sql2005</strong>;Initial Catalog=Grace;Persist Security Info=True;<strong>User ID=sa;Password=sa"/></strong>