随着科技的发展以及网络时代的到来,网络开始被应用到人们生活的方方面面,可以说网络无处不在,从各个方面影响着人们的生活。但是对于网络攻击等概念还是显得很模糊。基于这种情况,从静态网站和动态网站出发,简要介绍跨站脚本攻击的原理以及相应的防范措施。 With the development of science and technology and the advent of the Internet age, the Internet has begun to be applied to all aspects of people’s lives. It can be said that the Internet is ubiquitous and influences people’s lives in all aspects. But the concept of cyber attacks is still very vague. Based on this situation, starting from the static website and dynamic website, briefly introduces the principle of cross-site scripting attacks and the corresponding preventive measures.