摘要
跨站脚本攻击是目前Web安全中最为常用攻击手段之一,跨站脚本漏洞发生在程序直接把用户的数据发送到网络浏览器的时候,由于没有确认和编译这些内容,从而在浏览器中执行恶意的脚本。黑客还把跨站脚本与别的网络攻击相结合,造成更大的危害。通过对跨站脚本攻击原理的分析,给出了一些防御方法。
At present, cross-site scripting attack is one of the most commonly means of attack in Web security. Cross-site scripting vulnerability occurred when the program send the user＇s data to the Web browser directly, the content is not been identified and compiled,so the Web browser runs the malicious scripts. Hackers cause more damage with combining cross-site scripting and other network attacks, through analysing the principle of the cross- site scripting attack, and provides some methods of defense.
出处
《现代计算机》
2009年第2期109-110,共2页
Modern Computer
