怎么防止xss代码攻击

Question

<script>alert(1)</script>或者<img src="/img/aaa.png" onmousemove="alert(1)"/>

Answer 1

前端或后端过滤 特征标签和特征字符