With the rapid growth of Internet use, whether it is various information equipment, mobile devices or IoT devices, more and more services are provided using the Web. As Web application services are used in large numbers, what are the problems with Web applications? What risks will arise from these issues? How to face these risks is an important issue worthy of discussion.