基于SpringBoot应用中的XSS攻击防御技术  

XSS Attack and Defense Technology Based on SpringBoot Application

作　　者：殷志强 钟卫东 

机构地区：[1]胜利油田信息化技术服务中心,山东东营257022

出　　处：《工业控制计算机》2024年第11期62-64,共3页Industrial Control Computer

摘　　要：在计算机技术以及Web应用程序不断普及发展与应用的过程中,XSS漏洞类型以及攻击形式不断呈现多样化特征,给计算机用户安全带来严重威胁。SpringBoot是一个非常受欢迎的Web框架,可以使用Filter来防止XSS攻击,应用自定义过滤器的方法,在过滤器中继承实现HttpServletRequest的包装类,包装类中重写获取请求数据的方法,对用户提交数据进行监控分析,实现XSS脚本的过滤转义处理,确保我们的应用程序不会受到XSS攻击。In the process of computer technology and Web application development and application,the types of XSS vulnerabilities and attack forms are constantly showing diversified characteristics,which bring serious threats to the security of computer users.SpringBoot is a very popular Web framework,which can be used to prevent XSS attacks.It applies custom filter methods,inherits the wrapper class of HttpServletRequest in the filter,rewrites the method of obtaining request data in the wrapper class,monitors and analyzes user submitted data,implements XSS script filtering and escape processing,and ensures that our application is not vulnerable to XSS attacks.

关 键 词：SpringBoot 过滤器 XSS攻击 WEB攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]