XSS cross site scripting attack

One 、XSS Cross-site scripting attacks

1、Cookie summary

2、 Use JavaScript establish Cookie

JavaScript have access to document.cookie Property to create 、 Read 、 And delete cookie.

example 1：JavaScript in , establish cookie As shown below ：

document.cookie="username=John Doe";

example 2： You can also for cookie Add an expiration time （ With UTC or GMT Time ）. By default ,cookie stay Delete when browser closes ：

document.cookie="username=John Doe; expires=Thu, 18 Dec 2043 12:00:00 GMT";

Such as ：

3、JavaScript Cookie example

Description of the experiment ：

In the following example , We will create cookie To store visitor names .

First , Visitors visit web page , He will be asked to fill in his name . The name will be stored in cookie in .