1. HTML syntax:
The tag is a hierarchical structure, and the label is considered a name, and the value is inserted.
Key components: <,;, ', ', &
2. Parsing mode:
File Start <! Doctype> informed,
But can also be transmitted by Content-type,
For key characters in 1, the <! can be [cdata[...] > Packaging
3. Parser Behavior:
Very high tolerance for errors, spaces, special characters, HTML filter design sometimes can not only consider a layer two layer,
And the multiplicity of labels,
Standard inconsistencies across browsers
4. Entity code:
& Symbol at the beginning, end of symbol, ASCII, Unicode, (& #开头),
5. Hyperlinks and content include:
<a href= "url" >
The action of the form is essentially an HREF
6. Other resources:
Picture (); style sheet (<link rel=stylesheet href=...> or <style src=...>)
Client script (<script> including individual flower scripts)
Plugins (<embed>, <object> ...)
7. Cross-Domain requests
The browser is a transparent containing global identity information, so when the state changes the request sent to the server, it is impossible to confirm whether the customer or a third party sent.
Solution: Include a drawing-related encryption parameter in the request so that the third party cannot get it. (same-Origin policy read restrictions on cross-domain documents)
The Tangled Web (Web-trapped) Fourth Chapter summary