xss: what was originally data becomes a script and is executed
Defense xss: Do n’t let data become scripts, and do n’t let them execute in time
xss: Please briefly describe the principle of xss:
The full name of xss (self search in English) is a cross-site scripting attack, the principle is: the user's data (an article or a comment or a parameter when accessing the browser, etc.) is finally executed as a script on the page (the place where the execution is It may be in the script tag, or it may be an attribute of other tags or some rich text, etc.).
The most fundamental thing is that it is originally a data, which is regarded as a script and a program.