几种XSS和CSRF原理解析与demo演示

分析了反射型XSS、存储型XSS、基于DOM的XSS、来自PDF的XSS、CSRF攻击等几种跨站脚本攻击方式，并使用springboot搭建环境进行演示

package com.me.networksecurity;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;

@SpringBootApplication
public class JustAnApplication {

	public static void main（String[] args） {
		SpringApplication.run（JustAnApplication.class args）;
	}
}

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----
     目录           0  2019-03-24 12:50  xss_csrf_demo\
     文件         249  2017-11-27 22:52  xss_csrf_demo\.gitignore
     目录           0  2018-05-23 12:22  xss_csrf_demo\.idea\
     文件         727  2018-04-06 19:44  xss_csrf_demo\.idea\compiler.xml
     文件         172  2018-04-06 19:44  xss_csrf_demo\.idea\encodings.xml
     目录           0  2018-04-06 23:28  xss_csrf_demo\.idea\libraries\
     文件         477  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__antlr_antlr_2_7_7.xml
     文件         590  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__ch_qos_logback_logback_classic_1_1_11.xml
     文件         569  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__ch_qos_logback_logback_core_1_1_11.xml
     文件         537  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_fasterxml_classmate_1_3_3.xml
     文件         659  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_fasterxml_jackson_core_jackson_annotations_2_8_0.xml
     文件         610  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_fasterxml_jackson_core_jackson_core_2_8_8.xml
     文件         638  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_fasterxml_jackson_core_jackson_databind_2_8_8.xml
     文件         561  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_jayway_jsonpath_json_path_2_2_0.xml
     文件         715  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__com_vaadin_external_google_android_json_0_0_20131108_vaadin1.xml
     文件         477  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__dom4j_dom4j_1_6_1.xml
     文件         623  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__javax_transaction_javax_transaction_api_1_2.xml
     文件         626  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__javax_validation_validation_api_1_1_0_Final.xml
     文件         470  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__junit_junit_4_12.xml
     文件         589  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__mysql_mysql_connector_java_5_1_41.xml
     文件         557  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__net_minidev_accessors_smart_1_1.xml
     文件         536  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__net_minidev_json_smart_2_2_1.xml
     文件         640  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_apache_tomcat_embed_tomcat_embed_core_8_5_14.xml
     文件         626  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_apache_tomcat_embed_tomcat_embed_el_8_5_14.xml
     文件         675  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_apache_tomcat_embed_tomcat_embed_websocket_8_5_14.xml
     文件         574  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_apache_tomcat_tomcat_jdbc_8_5_14.xml
     文件         574  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_apache_tomcat_tomcat_juli_8_5_14.xml
     文件         564  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_aspectj_aspectjweaver_1_8_10.xml
     文件         550  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_assertj_assertj_core_2_6_0.xml
     文件         632  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_freemarker_freemarker_2_3_26_incubating.xml
     文件         547  2018-04-06 13:29  xss_csrf_demo\.idea\libraries\Maven__org_hamcrest_hamcrest_core_1_3.xml
............此处省略137个文件信息