?????????????
????1??????XSS????
????XSS??????????????????Cross Site Scripting????????????????(Cascading Style Sheets?? CSS)????д?????????????????????д?XSS??XSS??????????????web????е??????????????????????web???????????????????????????????С???????Щ???????HTML???????????????????????XSS?????·????????--???????????same origin policy???????????????????????????????дΣ????????phishing????????ù?????????????????????????繲?????????????????????"?????????????"????JavaScript???????"ShellCode"??
????XSS??????Σ????????
??????????????????????????????????????????????????????
??????????????????????????????????????????????????????
?????????????????????????????????
????????????
????????????????????
??????????????
??????????????????????????????????
????2??XSS????????
????XSS??????????????????????????????????????
????????A????????????????????????????????п????????????乥???????????????
????Alice??Bob???????????????Web??URL??
????Bob????????????URL??
????????????е?JavaScript??????????????HTML??沢???????Bob???????
?????????????HTML??????????Bob???????????е?JavaScript??
????Alice?????????????Bob??????????Bob?????е?????μ????
????????B?????????????????????????A??Щ????????????Web????????Server???????????????????????????δ?????????????????????????ж?δ??HTML????????????????????????????С??乥??????????:
????Alice?????????????????????Bob????С?Bob?????????Alice????????/??????е???????洢??????????????????????????
????Charly????Bob???????????????XSS?????
????Charly??д????????????URL????????e???????Bob??????????Alice??
????Alice??????Bob?????????Charly????URL??
???????URL?е????????Alice???????????У????????????Bob??????????????????????????????????????????????????????Alice?????????????????Щ????????Charly??Web???
????????C???洢?????????????????????????п??????Web????????????????????????????????????Web???????????????з????????????????????й??????????????????Web???????????????乥?????????￡?
????Bob??????Web??????????????????????/???????????????
????Charly???Bob????????????C??XXS?????
????Charly??????????????????????????????????
????Bob???????κε?????????Alice?????????????cookies???????????????Charly?????
????????A?????в??????壬??????B??????C????в????????????Web??????????Web??e?????????????????XSS????????????B??????C??