http://www.ruanyifeng.com/blog/2016/04/same-origin-policy.html

http://www.freebuf.com/articles/web/54686.html

http://115.com/1000018516/T1231785.html

http://blog.csdn.net/think_ycx/article/details/50267801

之前做过一些XXE的笔记··但没有图不好表达 直接下链接吧 http://blog.csdn.net/u011721501/article/de...

http://www.freebuf.com/articles/web/55965.html

http://www.hack80.com/thread-965-1-1.html

http://www.freebuf.com/articles/web/6389.html

记得去看