System and method for achieving system xss prevention in componentized form

Abstract

Disclosed are a system and a method for achieving system cross-site scripting (XSS) prevention in a componentized form. The system includes: a request message receiving module, configured to receive a request message; a thread data enable judgment module, configured to enable thread data to acquire a thread data enable state when judging that interception on the request message is required; an annotation retrieval and storage module, configured to store a preset filter annotation in a class of the request message in the thread data to acquire final thread data; a component creation module, configured to generate a XSS prevention component based on the thread data enable state and the final thread data; an intercept data determination module, configured to acquire intercepted request thread data based on the XSS prevention component; and an intercept prevention execution module, configured to delete the intercepted request thread data and return a request result.