8000 XSS和CSRF保护 | 雨轩恋的博客 · Issue #5 · tyutltf/tyutltf.github.io · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
XSS和CSRF保护 | 雨轩恋的博客 #5
Open
@tyutltf

Description

@tyutltf

https://tyutltf.github.io/2019/11/09/xss-protect/

XSS
xss攻击即跨站脚本攻击,攻击者将通过恶意代码注入到被攻击者的网站中,用户一旦访问就会执行被注入的恶意脚本。例如在用户评论界面输入代码

<script>alert('hhhh')</script>就会弹出

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0