DjangoChecker：应用扩展污点跟踪和服务器端解析检测上下文相关的XSS缺陷
DjangoChecker: Applying Extended Taint Tracking and Server Side Parsing for Detection of Context-Sensitive XSS Flaws
摘要：
跨站脚本（XSS）漏洞是一类允许将恶意代码注入Web应用程序的安全漏洞。在简单的情况下，这些缺陷可能是由于缺少输入清理而导致的。然而，有时，所有应用程序输入都被净化，但净化不适合净化值的浏览器上下文。使用不正确的杀毒程序可能会使应用程序看起来受到保护，但实际上它是脆弱的，就好像没有使用杀毒程序一样，从而产生上下文敏感的XSS缺陷。为了发现上下文敏感的XSS缺陷，我们引入了Django。DjangoServer将扩展的动态污点跟踪与模型浏览器结合起来进行上下文分析。我们在八个基于Django的成熟Web应用程序上演示了DjangoScript的实际应用，发现了八个应用程序中七个先前未知的缺陷，包括允许任意JavaScript执行的高度严重的缺陷。
英文摘要：
Cross-site scripting (XSS) flaws are a class of security flaws that permit the injection of malicious code into a web application. In simple situations, these flaws can be caused by missing input sanitizations. Sometimes, however, all application inputs are sanitized, but the sanitizations are not appropriate for the browser contexts of the sanitized values. Using an incorrect sanitizer can make the application look protected, when it is in fact vulnerable as if no sanitization was used, creating a context-sensitive XSS flaw. To discover context-sensitive XSS flaws, we introduce DjangoChecker. DjangoChecker combines extended dynamic taint tracking with a model browser for context analysis. We demonstrate the practical application of DjangoChecker on eight mature web applications based on Django, discovering previously unknown flaws in seven of the eight applications, including highly severe flaws that allow arbitrary JavaScript execution in the seven flawed applications.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
