核心规律只要在 script 标签内部出现 /script无论是什么都会触发这个问题与是否在字符串、注释、正则表达式等无关。如1script2alert(aaa);3///script4alert(bbb);5/script会被视为1script2alert(aaa);3/script引用文章地址https://blog.csdn.net/acgygb1062/article/details/102397291?ops_request_miscelastic_search_miscrequest_id01f96a4138c112b1097bd5b278caf252biz_id0utm_mediumdistribute.pc_search_result.none-task-blog-2allElasticSearch~search_v2-4-102397291-null-null.142v102pc_search_result_base2utm_termscript%E4%B8%AD%20%3C%2Fscript%3E%E9%9C%80%E8%A6%81%E8%BD%AC%E4%B9%89spm1018.2226.3001.4187引用作者书中叶原地址http://www.cnblogs.com/libook