网站的安全一般来自操作系统和应用程序,操作系统的漏洞可以通过打补丁来解决,而Web应用程序千变万化,其漏洞也是各式各样,而跨站脚本漏洞就是近年来黑客常用的一种攻击手段,本文对这种漏洞产生的原因和攻击手段进行了研究,并给出了一套科学的分析和发现漏洞的方法,对管理员和开发人员都有很好的借鉴作用。 Web site security is generally from the operating system and applications, operating system vulnerabilities can be solved by the patch, and the ever-changing Web applications, its vulnerabilities are varied, and cross-site scripting vulnerabilities hackers commonly used in recent years, an attack Means, this article has carried on the research to this kind of loophole to produce the reason and the attack method, and has provided a set of scientific analysis and the method which discovered the loophole, has the very good reference function to the manager and the developer.