安全小记

Web Security：

As a user
Do not click suspicious link in suspicious places
As a website developer/tester
Never trust user input and always filter metacharacters
Cookie protection
Pay attention to Javascript

Rule
Abandon Javascript dynamic codes after page is loaded
Abandon Javascript codes when navigate to URL

Peach：
Fuzz testing is one effective type of security testing. It finds program’s defects by inputting malformed, invalid, unexpected or random data. If fuzzed inputs trigger program’s crashes, exceptions or unexpected fails, valuable bugs are found. 

 Peach is a wonderful fuzz testing platform, it has some outstanding features. Web Security

As a user Do not click suspicious link in suspicious places As a website developer/tester Never trust user input and always filter metacharacters Cookie protection Pay attention to Javascript Rule Abandon Javascript dynamic codes after page is loaded Abandon Javascript codes when navigate to URL Fuzz testing is one effective type of security testing. It finds program’s defects by inputting malformed, invalid, unexpected or random data. If fuzzed inputs trigger program’s crashes, exceptions or unexpected fails, valuable bugs are found. Peach is a wonderful fuzz testing platform, it has some outstanding features.