标签:网站常用防御方式
CSRF:http://blog.csdn.net/stpeace/article/details/53512283
Session fixation:
https://www.cnblogs.com/davidwang456/p/3593578.html
http://www.gooseeker.com/cn/node/knowledgebase/whatissessionfixation
HTTP Strict Transport Security(HSTS):
HTTPS
XSS:
https://www.cnblogs.com/suwings/p/6285340.html
https://www.cnblogs.com/digdeep/p/4695348.html
标签:网站常用防御方式
原文地址:http://blog.51cto.com/xinzhilian/2089520