You’ll read more about XSS later.
你之后会看到关于xss的更多内容。
An XSS attack leads to undesirable effects.
XSS攻击会导致不良后果。
In many cases CSRF and XSS will help to do so.
在许多情况下，CSRF和XSS都有助于这样做。
Ways to check whether your site is protected from XSS.
检查您的站点是否处于XSS攻击保护的方法。
To protect against XSS attacks, you need to scrub all inputs.
要防止遭受 XSS攻击，需要清理所有输入。
XSS results from malicious scripts being injected into a Web site.
XSS由注入Web站点的恶意脚本而导致。
This security restriction is to avoid cross-site scripting attacks (XSS).
这个安全限制是为了避免跨站点脚本攻击(XSS)。
The following is a checklist of ways for webmasters and developers to prevent XSS attacks.
下面是站点管理员和开发人员可用来阻止XSS攻击的检查列表。
Finally, make sure your PHP code is resilient to XSS attacks, form spoofs, and CSRF attacks.
最后，确保PHP代码可以抵抗XSS攻击、表单欺骗和CSRF攻击。
In either case, input value validation and sanitization are the key to preventing XSS attacks.
不管怎样，输入值验证和数据消毒(sanitation)是防止XSS攻击的关键因素。
This piece of code is vulnerable to XSS attacks because no check is made to validate the input.
这段代码很容易受xss攻击，因为没有进行任何的输入验证。
An XSS vulnerability occurs when a user has the ability to inject HTML code into your Web pages.
当用户能够把HTML代码注入到您的web页面中时，就是出现了xss漏洞。
Unlike those, the XSS attack involves three parties: the attacker, the client, and the Web site.
与那些攻击不同的是，XSS攻击同时涉及三个群体：黑客、客户端和Web站点。
XSS has been used to steal passwords, steal credit card Numbers, forge news stories, and much more.
XSS曾被用于窃取密码、窃取信用卡卡号、伪造新闻等等。
The following examples are intended to help you recognize the areas that are vulnerable to XSS attack.
下面的例子可以帮助您识别易受XSS攻击的领域。
This can result in all kinds of attacks (similar to XSS), including the theft of sensitive user information.
这样会导致各种类型的攻击(类似于XSS)，包括盗取用户的敏感信息。
XSS attacks work by supplying input that a program does not expect and exploiting how it handles rogue input.
XSS通过提供程序不期望的输入，然后利用程序对无赖输入的处理方式发动进攻。
A mashup application or page must address CSRF, Ajax vulnerabilities, XSS, and other potential security weaknesses.
mashup应用程序或页面必须解决CSRF、Ajax漏洞、XSS和其他潜在的安全漏洞。
Note: This regular expression should not be used in production environments as it is not secure against XSS attacks.
注意：这个正则表达式不应该使用在生产环境中，因为它对于XSS攻击不安全。
XSS vulnerabilities represent a large portion of all the documented Web-site vulnerabilities in 2007 (see Resources).
XSS漏洞代表2007年所有归档的Web站点的大部分漏洞(请参阅参考资料)。
It was only in the past two years that the major browsers came with serious XSS defenses built right in to the browser.
可直到最近两年，主要的浏览器软件才把正经的防范XSS功能内置其中。
Whereas XSS attacks exploit the trust a user has in a Web site, CSRF attacks exploit the trust a Web site has in a user.
XSS攻击利用的是用户对网站的信任，CSRF 攻击利用的是网站对用户的信任。
According to the problem proposed above, this paper makes a research on the server-client cooperation XSS defense method.
为此，提出基于服务器端-客户端协作的跨站脚本攻击防御方法。
As you've seen in the XSS examples, most of the attacks exploit server-side vulnerabilities by injecting malicious scripts.
正如我们在XSS示例中所看到的，大多数的攻击都利用了服务器端的弱点，注入恶意脚本。
For example, if you are filtering for XSS on the web front-end, you must do it for your APIs, preferably with the same tools.
比如说，如果你在web前端过滤XSS，你必须对你的API也这样做，最好是使用同样的工具。
Many intrusion vulnerabilities such as SQL injection, CSRF, and XSS are preventable using a comprehensive input-validation framework.
如果使用一个综合的输入验证框架，许多输入漏洞，如SQL注入、CSRF和XSS，都是可以避免的。
So far, we have seen that an XSS attack can take place in a parameter of a GET request that is echoed back to the response by a script.
到此为止，我们已经看到XSS攻击可以出现在用脚本回送响应的GET请求的参数中。
When an attacker introduces a malicious script to a dynamic form submitted by the user, a cross-site scripting (XSS) attack then occurs.
当攻击者向用户提交的动态表单引入恶意脚本时，就会产生跨站点脚本(XSS)攻击。
Cross-site scripting (XSS for short) is one of the most common application-level attacks that hackers use to sneak into Web applications.
跨站脚本攻击(cross - site scripting，简称XSS)，是黑客用来潜入Web应用程序的最普遍的应用程序层攻击之一。
The goal of the XSS attack is to steal the client cookies or any other sensitive information that can identify the client with the Web site.
XSS攻击的目的是盗走客户端cookies，或者任何可以用于在Web站点确定客户身份的其他敏感信息。
应用推荐