摘要
XSS,即跨站脚本攻击(Cross Site Script)是Web程序中最常见的漏洞之一,针对XSS攻击众多学者也提出了许多检测与防御方法。文中试着从一个新的角度,借助HTML5的一些新特性,提出一套纯前端脚本实现的在线预警系统,在可疑XSS攻击发生时能及时修复漏洞。在文章最后,还将该系统与HTML5自身的XSS解决方案CSP(Content Security Policy)进行对比,分析其优劣。
XSS,Cross Site Scripting,is one of the most common vulnerabilities in Web applications.Many scholars also put forward a lot of methods to detect and defend XSS attack. This paper tries to use some new features of HTML5 to propose a warning system on the Web front-end which can fix the vulnerability in time. In the end of the paper,the system is compared with the XSS solution CSP,Content Security Policy,which is introduced by HTML5 itself.
出处
《信息技术》
2016年第11期130-133,共4页
Information Technology
