Node.js 带有脚本标记和警报的参数错误

Node.js 带有脚本标记和警报的参数错误,node.js,express,Node.js,Express,我的记录器中显示以下错误 URIError: Failed to decode param '/%db<script>alert(539043);</script>/' at decodeURIComponent (<anonymous>) at decode_param (/usr/src/app/node_modules/express/lib/router/layer.js:172:12) at Layer.match (/usr/src/app/nod

我的记录器中显示以下错误

URIError: Failed to decode param '/%db<script>alert(539043);</script>/'
at decodeURIComponent (<anonymous>)
at decode_param (/usr/src/app/node_modules/express/lib/router/layer.js:172:12)
at Layer.match (/usr/src/app/node_modules/express/lib/router/layer.js:123:27)
at matchLayer (/usr/src/app/node_modules/express/lib/router/index.js:574:18)
at next (/usr/src/app/node_modules/express/lib/router/index.js:220:15)
at app.use (/usr/src/app/app.js:83:9)
at Layer.handle [as handle_request] (/usr/src/app/node_modules/express/lib/router/layer.js:95:5)
at trim_prefix (/usr/src/app/node_modules/express/lib/router/index.js:317:13)
at /usr/src/app/node_modules/express/lib/router/index.js:284:7
at Function.process_params (/usr/src/app/node_modules/express/lib/router/index.js:335:12)
URIError:无法解码参数'/%dbalert(539043);/'
在组件()处
在decode_param(/usr/src/app/node_modules/express/lib/router/layer.js:172:12)
在Layer.match(/usr/src/app/node\u modules/express/lib/router/Layer.js:123:27)
在matchLayer(/usr/src/app/node_modules/express/lib/router/index.js:574:18)
下一步(/usr/src/app/node_modules/express/lib/router/index.js:220:15)
在app.use(/usr/src/app/app.js:83:9)
在Layer.handle[作为handle_请求](/usr/src/app/node_modules/express/lib/router/Layer.js:95:5)
在trim_前缀(/usr/src/app/node_modules/express/lib/router/index.js:317:13)
at/usr/src/app/node_modules/express/lib/router/index.js:284:7
在Function.process_参数(/usr/src/app/node_modules/express/lib/router/index.js:335:12)
我想这是有人试图探测我的网站的一些漏洞。这像发条一样每周发生2次

大约在同一时间,我也遇到了以下错误:

URIError: Failed to decode param '/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd'
    at decodeURIComponent (<anonymous>)
    at decode_param (/usr/src/app/node_modules/express/lib/router/layer.js:172:12)
    at Layer.match (/usr/src/app/node_modules/express/lib/router/layer.js:123:27)
    at matchLayer (/usr/src/app/node_modules/express/lib/router/index.js:574:18)
    at next (/usr/src/app/node_modules/express/lib/router/index.js:220:15)
    at app.use (/usr/src/app/app.js:83:9)
    at Layer.handle [as handle_request] (/usr/src/app/node_modules/express/lib/router/layer.js:95:5)
    at trim_prefix (/usr/src/app/node_modules/express/lib/router/index.js:317:13)
    at /usr/src/app/node_modules/express/lib/router/index.js:284:7
    at Function.process_params (/usr/src/app/node_modules/express/lib/router/index.js:335:12)
URIError:未能解码参数'/%c0%ae%c0%ae/%c0%ae/%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae/%c0%ae/%c0%ae/etc
在组件()处
在decode_param(/usr/src/app/node_modules/express/lib/router/layer.js:172:12)
在Layer.match(/usr/src/app/node\u modules/express/lib/router/Layer.js:123:27)
在matchLayer(/usr/src/app/node_modules/express/lib/router/index.js:574:18)
下一步(/usr/src/app/node_modules/express/lib/router/index.js:220:15)
在app.use(/usr/src/app/app.js:83:9)
在Layer.handle[作为handle_请求](/usr/src/app/node_modules/express/lib/router/Layer.js:95:5)
在trim_前缀(/usr/src/app/node_modules/express/lib/router/index.js:317:13)
at/usr/src/app/node_modules/express/lib/router/index.js:284:7
在Function.process_参数(/usr/src/app/node_modules/express/lib/router/index.js:335:12)
有什么方法可以防止这种情况发生吗?我应该关心这件事吗?是否有处理不合法参数的标准方法