:http://www.cnblogs.com/dolphinX/p/3391351.html
跨站脚本攻击详解:http://www.2cto.com/Article/201306/220533.html
跨站式脚本(Cross-SiteScripting)XSS攻击原理分析第1/4页:http://www.jb51.net/article/15688.htm
:http://www.cnblogs.com/coderzh/archive/2008/09/06/1285500.html