跨站脚本攻击原理与防范

Principle and Prevention of Cross-Site Srcipting Attack

本文首先从静态网站和动态网站的区别出发,介绍了跨站脚本形成的原因和攻击的原理,然后说明了跨站脚本攻击所带来的危害,最后针对网站开发人员和网络用户提供了几种最为有效的防范和检测办法。

This Paper firstly introduces the fact how a Cross-Site Scripting issue occurs and the principle how it comes to a real attack from the difference between static web sites and dynamic web sites,then illuminates what compromise it can bring out. In this paper,several available methods of prevention and detection are provided to vendor as well as user.