The research of XSS – Security threat of Ajax

• Main Authors: Kai-Yi Wang, 王愷儀
• Other Authors: Chih-Hung Li
• Format: Others
• Language: zh-TW
• Published: 2008
• Online Access: http://ndltd.ncl.edu.tw/handle/45089097483989217632

碩士 === 樹德科技大學 === 資訊管理研究所 === 96 === Since the age of network began, there are many convenient services such as Webmail, blog, online album, online hard disk…etc. When client communicate with server, due to the request-response model, the client suffer from screen blinking and delay of response. The AJAX(Asynchronous Javascript And XML) is a popular solution, it will improve the performance of web services to be as quick as host applications. The famous applications such as google suggest, google earth and google mail are the trend of web application. But web service with AJAX may exist the security risk by so called XSS(Cross Site Scripting). By this hole of security, attacker can spread malicious script to both server and client or catches the sensitive information. The study will discuss how to prevent this kind of attack and try to build a mechanism by filtering out the malicious script to reduce the security threat.