<div id=ttt></div>
<img style="margin-top:500px" src="comment.gif" title=' <div style="width:200px; height:400px">
<table width="100%" cellpadding="0" cellspacing="5">
<tr> <td> <img src="comment.gif" alt="" /> </td> </tr>
<tr> <td>商城价:¥50 <del>¥80 </del> <script>alert("pass"); </script> </td> </tr>
<tr> <td>商品名 </td> </tr>
</table> </div>' />
<script language="javascript">
<!--
var obj=document.getElementsByTagName("img")[0]
var str=obj.title
obj.title=""
document.getElementById("ttt").innerHTML=str
var scriptStr=str.split("<script>")[1].split("</script>")[0];
eval(scriptStr)
//-->
</script>
解决方案 »
免费领取超大流量手机卡,每月29元包185G流量+100分钟通话, 中国电信官方发货