XSS漏洞分析与攻击平台的搭建

XSS Vulnerability Analysis and Attack Platform Construction

XSS是一种在Web应用中的计算机安全漏洞,它能让Haker将代码植入到其他用户使用的页面中.虽然XSS漏洞本身的机制比较简单,但由于当今B/S结构的高度发展,网站需要实现的需求越来越多样化,复杂的逻辑关系导致了XSS屡禁不止.文中从Haker和Web开发者的角度对XSS攻击进行分析,旨在为XSS的防治提供一个良好的解决方案.

XSS is a computer security vulnerability in Web applications that allows Haker to embed code into pages used by other users.Due to the high development of B/S today,the needs of Website need to be realized are more and more diversified,and the complex logic relationship leads to the repeated prohibition of XSS,although the mechanism of XSS vulnerability itself is relatively simple.The paper analyses XSS attacks from the perspective of Haker and Web developers,aiming to provide a good solution for XSS prevention.