[wp] 攻防世界 upload1

右鍵查看源碼發現本地js驗證

<script type="text/javascript">
 

Array.prototype.contains = function (obj) {  
    var i = this.length;  
    while (i--) {  
        if (this[i] === obj) {  
            return true;  
        }  
    }  
    return false;  
}  

function check(){
upfile = document.getElementById("upfile");
submit = document.getElementById("submit");
name = upfile.value;
ext = name.replace(/^.+\./,'');

if(['jpg','png'].contains(ext)){
	submit.disabled = false;
}else{
	submit.disabled = true;

	alert('請選擇一張圖片文件上傳!');
}


}

</script>

f12

把οnchange="check();"刪了

菜刀連上,得到flag