Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

前端要注意的网站安全 #32

Open
wuxianqiang opened this issue Jan 9, 2018 · 0 comments
Open

前端要注意的网站安全 #32

wuxianqiang opened this issue Jan 9, 2018 · 0 comments
Labels
blog

Comments

@wuxianqiang
Copy link
Owner

  1. XSS

  2. sql注入

  3. CSRF：是跨站请求伪造，很明显根据刚刚的解释，他的核心也就是请求伪造，通过伪造身份提交POST和GET请求来进行跨域的攻击

完成CSRF需要两个步骤：

  1. 登陆受信任的网站A，在本地生成 COOKIE

  2. 在不登出A的情况下，或者本地 COOKIE 没有过期的情况下，访问危险网站B。
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
blog
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@wuxianqiang