Passive scanning jsonp recognition based on Yak

Author: @shangzeng master

What is JSONP hijacking vulnerability

Websites with different domain names cannot transmit data due to the same origin policy (same protocol, same domain name, same port), but at some point we need to transmit data across domains.

At this time, jsonp was born as one of the cross-domain methods. Because the three tags