Analysis and prevention for cross-site scripting attack based on encoding

With the development of Web application, cross-site scripting attacks have been rapidly increasing, and the technique of those attacks is constantly updating. There has been some special advanced attacks such as the one based on encoding. In this paper we analyze two kinds of those attacks respectively based on the binary and N-ray alphabets encoding, then presents a dynamically access control method to prevent them by means of the existing detection and prevention technology of cross-site scripting attack, making up the existing approach being lack of the practicality, and the experimental results verify the feasibility and practicality of our protection mechanism.