WooYun.org

http://etg.qq.com/billboard/minsite/etg.shtml?fu=http%3A%2F%2Fa.paipai.com%2f%26size%3D1024x768%26time%3D0

var fu=$xss(decodeURIComponent($getQuery('fu')),'script'),
      content=document.getElementById('content'); 
  
  if(fu.search(/^http\:\/\/.*\.paipai.com($|(\/[^<>\'\"]*))/) > -1){
  	 var uin=$getUin(),
	    sizes=$getQuery('size',fu).split('x');
		if(sizes&&sizes.length==2){
			content.style.width=sizes[0]+'px';
			content.style.height=sizes[1]+'px';
		}
		content.src=fu+(uin ? (fu.indexOf('?')>0 ? '&uin=':'?uin=')+uin  :'');
  }else{
  	content.src='http://www.paipai.com';
  }
  
   function $getUin(){
	    var uin=$getCookie("uin")||$getCookie('uin_cookie')||$getCookie('pt2gguin')
		        ||$getCookie('o_cookie')||$getCookie('luin')||$getCookie('buy_uin');
	    return uin?parseInt(uin.replace("o",""),10):"";
   }
  function $getQuery(name,url){
	var u  = arguments[1] || window.location.search,
		reg = new RegExp("(^|&)"+ name +"=([^&]*)(&|$)"),
		r = u.substr(u.indexOf("\?")+1).match(reg);
	   return r!=null?r[2]:"";
  }
  function $getCookie(name) {
	var reg = new RegExp("(^| )" + name + "(?:=([^;]*))?(;|$)"), val = document.cookie.match(reg);
	return val ? (val[2] ? unescape(val[2]) : "") : null;
  }
function $xss(str,type){
	//空过滤
	if(!str){
		return str===0 ? "0" : "";
	}
	switch(type){
		case "script":
			return str.replace(/[\\"']/g, function(r){
				return "\\" + r;
			}).replace(/%/g, "\\x25").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\x01/g, "\\x01");
		break;
	}
}

fu.search(/^http\:\/\/.*\.paipai.com($|(\/[^<>\'\"]*))/)

http://etg.qq.com/billboard/minsite/etg.shtml?fu=http%3A%2F%2Fwww.baidu.com%2F%3Fa%3D.paipai.com%2f%26size%3D264x160%26time%3D0
//解码后就是
http://etg.qq.com/billboard/minsite/etg.shtml?fu=http://www.baidu.com/?a=.paipai.com/&size=264x160&time=0

fu.search(/^http\:\/\/[^.]*\.paipai.com($|(\/[^<>\'\"]*))/)

http://etg.qq.com/billboard/minsite/etg.shtml?fu=http%3A%2F%2F1032300905%2F%3Fa%3D.paipai.com%2f%26size%3D1024x768%26time%3D0
//解码后就是,没有出现点号
http://etg.qq.com/billboard/minsite/etg.shtml?fu=http://1032300905/?a=.paipai.com/&size=1024x768&time=0