Shulou(Shulou.com)06/01 Report--

Recently, I have been interested in the knowledge of network security, and the book I am reading is the authoritative Guide to Web Application Security recommended on the Internet. This book provides downloading a virtual machine image, which can be run on a computer browser to do the experiments in the book.

Page 66 deals with an experiment with XSS. The normal effect is to execute JavaScript, and a dialog box pops up. When I did this, IE prompted that "Internet Explorer has modified this page to help prevent cross-site scripting." (figure 1).

I first add the address to the trusted site (figure 2), which doesn't work. When I think of setting up an OA system for a company in the past, I not only need to add a trusted site, but also need to change the content of the "custom level". Through the search, I finally found an option: enable the XSS filter. Disable it (see figure 3) and the problem is resolved.

This is a measure taken by IE for security reasons, but the experimental environment sometimes has to turn off these functions in order to see the results better. In other words, this knowledge is already out?

Figure 1

Figure 2

Figure 3

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.