Web应用中XSS攻击的分析和防御

XSS attack's analysis and defense based on Web application

随着Web应用在互联网中的迅速发展,出现了大量的Web安全漏洞,其中最为突出的是跨站脚本(XSS)漏洞攻击。为了对Web应用中的XSS漏洞进行有效的检测和防御,通过分析XSS漏洞的特征及原理,总结出产生该漏洞攻击的几大主要原因,结合目前常用漏洞检测方法提出几种XSS漏洞攻击的防御方法,可有效识别和防范XSS漏洞攻击,对Web应用具有较高的实用性。

With the rapid development of Web applications in the Interact, a lot of Web security vulnerabilities come into being, of which the most prominent is the cross-site scripting （XSS） vulnerability attacks. In order to make effective detection and prevention for XSS vulnerabilities in Web applications, this paper analyzes the characteristics and principles of XSS vulnerabilities, summaries several main reasons causing the vulnerability attacks, and proposes several detection methods for XSS vulnerabilities attacks, which can identify and prevent XSS vulnerabilities attacks effectively on Web applications with high availability.