Shulou(Shulou.com)06/01 Report--

Xss is divided into reflective type, storage type, dom based xss the first two are easy to understand for dom based xss a little around the record.

The common xss is client-side input and direct output in html if there is no filtering js code will be executed.

And dom based xss, it's different.

The following examples are used to explain

Function a () {var str=document.getElementById ('test') .value; document.getElementById ("t") [xss_clean] = "testlink";} test

Anyone who can program can understand what this means.

In fact, DOM based xss outputs data from javascript to html pages. The storage type and reflection type are all aimed at the xss vulnerability of the server application output to the html page.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.