Research on Cross-site Scripting Vulnerability of XSS Based on International Student Website

The international student website is the window of the school's external publicity. Through the website, international students can understand the school in a wider range and in all aspects. The website is often attacked by network hackers. How to ensure the security of the website? Cross site scripting attack (XSS) is the most common web application security vulnerability. Through the analysis of cross site scripting attack (XSS), this paper puts forward the preventive methods for input verification, output coding, clearly specifying the coding mode of output, paying attention to the limitations of blacklist verification mode, being alert to standardization errors, and gives examples of not inserting untrusted data in the allowed position, and HTML coding these data when inserting untrusted data between HTML tags, Before inserting untrusted data into common HTML attributes, encode HTML attributes; before inserting untrusted data into HTML JavaScript, encode JavaScript; before inserting untrusted data into HTML style attribute values, encode CSS; before inserting untrusted data into HTML URL attributes, encode URL; when using rich text, use XSS rule engine to encode and filter and other corresponding defense rules.