https://hackershare.dev/en/bookmarks/860134
前端安全之XSS及CSRF