跨站漏洞解析-（Cross site scripting vulnerability analysis）.docVIP

跨站漏洞解析-（Cross site scripting vulnerability analysis） A preface without counting the preface It seems that it has not been written about security in a long time. In the so-called safe circle, you may think that the cat has disappeared, but I think the black cat as a hacker might never have appeared. Thats right. Im Hyun cat. If you had seen a private security magazine in the hacker X file or the hacker manual for the last two years, you might have seen it. Or, Im sorry, your site sometimes appeared Hyun cat, ah Hyun cat. Such a prompt box or text, so I am sorry, I write the exploits of abuse to your site, the blue ideal of programmers, presumably a lot of stationmaster, here I apologize to you. What is cross site scripting attack OK, lets get into the text. As usual, I first gave the official definition of XSS attacks . Cross Site Script is XSS attack, Execution (usually abbreviated as XSS) refers to the use of web application to attacker user input filter input can show the impact on other users in the HTML code on the page, an attack to steal user data, the user identity for some action or of visitors for viruses. In this definition, three main points are mentioned: First, why What- will produce XSS attacks. Have to cross site scripting attacks because the programmer wrote in the program when the inconsiderate, of course, may also be no consideration. There is a famous saying on security, never trust the users input.. See here, as ordinary users dont despise you, I do not trust you, as usability experts you dont scold me, also do not attach importance to the user, as a programmer you want to wash your face with cold water, the spirit of it. When you wrote a program before, did you consider what would happen if the user entered the content displayed on the site?. Whats the problem? I put aside the topic here XSS attacks, you have not found, sometimes the user input, causing your page deformation? When you say, Oh, this user is really troublesome, are you still think