课程: Programming Foundations: Web Security

今天就学习课程吧！

今天就开通帐号，24,600 门业界名师课程任您挑！

Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS)

课程: Programming Foundations: Web Security

开始一个月试用 购买团队方案

Cross-Site Scripting (XSS)

“

- A cross-site scripting attack occurs when an attacker injects code, primarily HTML and JavaScript, into your webpages so that other users' browsers will execute it. It gets its name because an attacker sends scripts across your website to someone else's browser. Cross-site scripting becomes possible when webpages use user supplied data in the HTML response without sanitizing the data first. Cross-site scripting, often abbreviated as XSS, is ranked as one of the top 10 security threats and is the most common web application security flaw. There are three types of cross-site scripting: reflected, stored, and DOM-based. Reflected attacks are the most common type. Let's look closer at them because they will help us to understand all three types. In a reflected XSS attack, an attacker puts JavaScript code to be run in a URL string or in the form data sent with the request. When the page loads, the script runs immediately in…

内容