https://www.chenshaowen.com/en/tags/web/Recent content in Web on Shaowen Chen's WebsiteHugo -- gohugo.ioen©2016 - {year}, All Rights Reserved.Tue, 04 Jun 2019 00:00:00 +0000weeklyhttps://www.chenshaowen.com/en/blog/how-to-prevent-xss-in-web-rich-text.htmlTue, 04 Jun 2019 00:00:00 +0000Tue, 04 Jun 2019 00:00:00 +0000https://www.chenshaowen.com/en/blog/how-to-prevent-xss-in-web-rich-text.html1. How XSS Works and Several Common Attack Types An XSS attack is an attack that executes malicious scripts to steal a user’s login state, hijack a session, and so on. The input sources for malicious scripts include Cookies, Post forms, Get requests, HTTP header content, and more. We usually call a code fragment used for an XSS attack an XSS vector.WeChat Official AccountXSSRich TextSecurityWebR&Dhttps://www.chenshaowen.com/en/blog/learning-flask-1.htmlThu, 20 Sep 2018 00:00:00 +0000Thu, 20 Sep 2018 00:00:00 +0000https://www.chenshaowen.com/en/blog/learning-flask-1.html1. Introduction Flask was born in 2010 and is a lightweight Web application framework written in Python. Flask depends on two libraries. Jinja2, a template engine similar to mako Werkzeug, a Python library that follows the WSGI protocol and implements much of what sits underneath a Web framework, such as the request and response objects.WeChat Official AccountFlaskWebPythonBackendLearninghttps://www.chenshaowen.com/en/blog/nginx-configuration-problem-record.htmlWed, 18 Apr 2018 00:00:00 +0000Wed, 18 Apr 2018 00:00:00 +0000https://www.chenshaowen.com/en/blog/nginx-configuration-problem-record.html1. server_name Has No Effect Symptom: Nginx reverse-proxies two applications, and the configuration details are as follows. It turned out that requests to b.chenshaowen.com and a.chenshaowen.com both returned responses from service A. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 serverWeChat Official AccountNginxConfigurationTroubleshootingOperationsLearningReverse ProxyBest PracticesWebhttps://www.chenshaowen.com/en/blog/burpsuite-web-attack-detection.htmlFri, 16 Dec 2016 16:15:54 +0000Fri, 16 Dec 2016 16:15:54 +0000https://www.chenshaowen.com/en/blog/burpsuite-web-attack-detection.html1. Introduction to Burpsuite Burp Suite is an integrated platform for attacking web applications. It contains many tools and designs many interfaces for those tools, in order to speed up the process of attacking an application. All the tools share one powerful, extensible framework that can handle and display HTTPWeChat Official AccountNetworkSecurityAttackWebBurpsuite