1、一行代码暴出网页源代码
s=document.documentElement.outerHTML;
document.write('<body></body>');
document.body.innerText=s;

2、
 <script language="JavaScript" for="window" event="onload">
var xmlDoc = new ActiveXObject("Microsoft.XMLDOM");
xmlDoc.async="false";
xmlDoc.load("hello.xml");
nodes = xmlDoc.documentElement.childNodes;
greeting.innerText = nodes.item(0).text;
</script>

3、
function jump(url){
    var e = document.createElement("a");
    e.href = url;
    document.body.appendChild(e);
    e.click();
}


function flexisum(a) {
var total = 0;
for(var i = 0; i < arguments.length; i++) {
var element = arguments[i];
if (!element) continue;  // Ignore null and undefined arguments
// Try to convert the argument to a number n,
// based on its type
var n;
switch(typeof element) {
case "number":
n = element;                  // No conversion needed here
break;
case "object":
if (element instanceof Array) // Recurse for arrays
n = flexisum.apply(this, element);
else n = element.valueOf();   // valueOf method for other objects
break;
case "function":
n = element();                // Try to invoke functions
break;
case "string":
n = parseFloat(element);      // Try to parse strings
break;
case "boolean":
n = NaN;                      // Can't convert boolean values
break;
}
// If we got a valid number, add it to the total.
if (typeof n == "number" && !isNaN(n)) total += n;
// Otherwise report an error
else throw new Error("sum(): can't convert " + element + " to number");
}
return total;
}