[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGc04qkKQJqUt0blkhlbTBoGXaTfYLQr0fRRalxXLZMI":3},{"answer":4,"createTime":5,"id":6,"options":7,"origin":12,"question":19,"related":20,"source":31,"type":32},[],"2024-05-30 15:53:11",147295155,[8,9,10,11],"用户上传文件","用户登录后重定向","静态页面浏览","服务器后台配置",{"count":13,"courseId":14,"courseImg":15,"courseName":16,"workId":17,"workName":18},40,"b7186aefdff3fc6c5ce6f083c7e97592","https:\u002F\u002Ftihai-oss-cloud.itihey.com\u002Fimg\u002F25b30343053994e8940089572d36015b.jpg","Web应用安全","5e75128856bf4fb28bb37159b67daa47","","URL跳转漏洞通常发生在以下哪种情况下",[21,33,43,53,63,73,83,93,103,106],{"answer":22,"createTime":23,"id":24,"options":25,"question":30,"source":31,"type":32},[],"2024-05-30 15:53:00",147295147,[26,27,28,29],"<script>","<iframe>","<div>","<button>","点击劫持攻击主要利用了哪种HTML元素","v1",0,{"answer":34,"createTime":35,"id":36,"options":37,"question":42,"source":31,"type":32},[],"2024-05-30 15:53:01",147295148,[38,39,40,41],"X-Content-Type-Options","X-Frame-Options","Content-Security-Policy","X-XSS-Protection","哪个HTTP响应头可以用来防止点击劫持",{"answer":44,"createTime":45,"id":46,"options":47,"question":52,"source":31,"type":32},[],"2024-05-30 15:53:02",147295149,[48,49,50,51],"DENY","SAMEORIGIN","ALLOW-FROM uri","NONE","在X-Frame-Options头中,哪个值表示不允许任何页面将当前页面嵌入<iframe>或<frame>中",{"answer":54,"createTime":55,"id":56,"options":57,"question":62,"source":31,"type":32},[],"2024-05-30 15:53:04",147295150,[58,59,60,61],"SQL注入","跨站脚本攻击(XSS)","跨站请求伪造(CSRF)","用户在不知情的情况下执行操作","如果一个网站没有设置防止点击劫持的措施,那么它可能面临哪种风险",{"answer":64,"createTime":65,"id":66,"options":67,"question":72,"source":31,"type":32},[],"2024-05-30 15:53:06",147295151,[68,69,70,71],"验证码","输入验证","帧破坏(Frame Busting)","加密通信","哪种技术可以用来检测并阻止点击劫持攻击",{"answer":74,"createTime":75,"id":76,"options":77,"question":82,"source":31,"type":32},[],"2024-05-30 15:53:07",147295152,[78,79,80,81],"sandbox","srcdoc","allowfullscreen","frameborder","哪个属性可以防止一个<iframe>被其他页面嵌入",{"answer":84,"createTime":85,"id":86,"options":87,"question":92,"source":31,"type":32},[],"2024-05-30 15:53:09",147295153,[88,89,90,91],"浏览器会阻止嵌入","嵌入成功,但内容被修改","浏览器会显示警告信息","嵌入成功,但无法交互","当一个网站使用了X-Frame-Options: DENY,但攻击者仍然试图将其嵌入<iframe>,会发生什么",{"answer":94,"createTime":95,"id":96,"options":97,"question":102,"source":31,"type":32},[],"2024-05-30 15:53:10",147295154,[98,99,100,101],"使用HTTPS的网站","使用HTTP的网站","没有用户输入的网站","所有类型的网站","哪种类型的网站最容易受到点击劫持攻击",{"answer":104,"createTime":5,"id":6,"options":105,"question":19,"source":31,"type":32},[],[8,9,10,11],{"answer":107,"createTime":108,"id":109,"options":110,"question":112,"source":31,"type":32},[],"2024-05-30 15:53:12",147295156,[58,59,111,60],"钓鱼攻击","URL跳转漏洞可能导致哪种攻击"]