Exploiting JavaScript loading vulnerabilities

For panic buying, the product will only be opened for panic buying at a certain time, and the code time of the panic buying page needs to be synchronized with the server regularly.

In a normal network, when a user opens a webpage where a product is snapped up, the JavaScript of the page will be loaded quickly. At this time, the add-shopping button on the page is grayed out and cannot be clicked.

When the Internet is bad, because the JavaScript of the web page is loaded and executed sequentially, the buttons added to the shopping can be clicked. Only after the JavaScript is loaded will it be grayed out and inoperable. The consequence of this is that the goods are rushed before the activity starts, even if the inventory is zero.

Solution: The server records whether it’s time to buy the goods, add a layer of verification

For details on loading of JavaScript, please refer to: https://blog.csdn.net/viewyu12345/article/details/79635883

Guess you like

Origin blog.csdn.net/weixin_45131345/article/details/106859769