> For the complete documentation index, see [llms.txt](https://easonwang.gitbook.io/web_advance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://easonwang.gitbook.io/web_advance/web-an-quan-ji-zhi.md).

# Web 安全機制

## CSP

<https://devco.re/blog/2014/04/08/security-issues-of-http-headers-2-content-security-policy/>

## CSRF

{% embed url="<https://blog.techbridge.cc/2017/02/25/csrf-introduction/>" %}

## XSS

<https://blog.davidh83110.com/%E8%B3%87%E8%A8%8A%E5%AE%89%E5%85%A8/%E9%A7%AD%E5%AE%A2%E6%8A%80%E8%A1%93/owasp%20top10/2016/10/10/xss.html>