Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/lixiangwei/xsser
xss监控（xss monitor）
https://github.com/lixiangwei/xsser
monitor xss
Last synced: 21 days ago
JSON representation
xss监控（xss monitor）
- Host: GitHub
- URL: https://github.com/lixiangwei/xsser
- Owner: lixiangwei
- License: mit
- Created: 2016-07-25T09:12:41.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2017-10-05T15:17:13.000Z (about 7 years ago)
- Last Synced: 2024-11-07T14:52:01.270Z (about 1 month ago)
- Topics: monitor, xss
- Language: JavaScript
- Homepage:
- Size: 16.6 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - lixiangwei/xsser - xss监控（xss monitor） (JavaScript)
README
# xsser
xss扫描检测（xss scan）
使用（usage）： xss(yourCallback);
原理：在事件捕获的过程中，通过正则表达式过滤可疑代码，在代码加载进页面或者调用DOM API之前拦截
不依赖其他库（no dependence）
HTML5有推出XSS解决方案：CSP http://www.w3.org/TR/CSP11/
启发自：http://fex.baidu.com/blog/2014/06/xss-frontend-firewall-1/
XSS比赛：https://github.com/cure53/XSSChallengeWiki/wiki