August 2018
Beginner
594 pages
22h 33m
English
Cross-site scripting (XSS) vulnerabilities allow attackers to execute scripts in the browser. The scripts might be designed to hijack a user's session, replace web site content, or redirect users. It is a highly prevalent security flaw. There are three major types of XSS attack:
With reflected XSS, an application or API takes untrusted data and sends it to the browser without proper validation or escaping. Stored XSS is possible when an application or API stores user input data that has not been properly validated or escaped, which is viewed at a later time. DOM XSS is possible when data that is controlled by an attacker is included dynamically by a JavaScript framework, API, or ...
Read now
Unlock full access