一个便民应用限制得如此丧心病狂我也是醉了...

推荐关注

› Meteor

› JSLint - a JavaScript code quality tool

› jsFiddle

› D3.js

› WebStorm

推荐书目

› JavaScript 权威指南第 5 版

› Closure: The Definitive Guide

This topic created in 4012 days ago, the information mentioned may be changed or developed.

http://wbus.its-iot.com/wei-bus-app/route?nickName=&openId=ouz9Ms6NtWbUFHhxZj12JumuWh-M&gzhUser=gh_342e92a92760

if (common.getUrlParam("openId")) {
    sessionStorage.openId = common.getUrlParam("openId");
} else if (!sessionStorage.openId && document.cookie && common.getCookie("openId")) {
    sessionStorage.openId = common.getCookie("openId");
}

if (common.getUrlParam("gzhUser")) {
    sessionStorage.gzhUser = common.getUrlParam("gzhUser");
} else if (!sessionStorage.gzhUser && document.cookie && common.getCookie("gzhUser")) {
    sessionStorage.gzhUser = common.getCookie("gzhUser");
}

if (!common.getModuleRole("非微信浏览", sessionStorage.openId)) {
    var ua = navigator.userAgent.toLowerCase();
    if (ua.match(/MicroMessenger/i) != "micromessenger") {
        location.href = "browserError";
    }
}

我看了下源代码，这货要判断URL传入的两个ID以及浏览器UA，但是我把UA伪装成微信（Mozilla/5.0 (iPhone; CPU iPhone OS 6_1_3 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Mobile/10B329 MicroMessenger/5.0.1）且带上UrlParam以后还是被跳转到browserError

openid

gzhuser

微信

10 replies • 2015-06-13 18:15:16 +08:00