https://takao.blog/zh/tags/xss/Recent content in Xss on Commentary of TakaoHugo -- gohugo.iozhCommentary of TakaoWed, 15 Jul 2026 22:01:08 +0900https://takao.blog/zh/web/security-basics-xss-prevention/Tue, 25 Feb 2025 00:00:00 +0900https://takao.blog/zh/web/security-basics-xss-prevention/<img src="https://takao.blog/img/thumbnail/security-basics-xss-prevention-zh.png" alt="Featured image of post Web开发中XSS的防御原则" /><h2 id="介绍">介绍 </h2><p>在网络安全中，<strong>跨站脚本 (XSS)</strong> 是最古老、最持久的漏洞之一。</p> <p>如果恶意脚本在受害者的浏览器上运行，它们可能会破坏整个会话、窃取会话令牌 (cookie)、劫持帐户或动态更改页面内容以获取敏感凭据。</p>