Cross-site scripting (XSS)
Cross-site scripting (XSS) is a vulnerability found on web applications. XSS allows attackers to inject scripts into the website. These scripts can be used to manipulate the web server, or the clients connecting to the web server.
Cross-site scripting has accounted for a large majority of popular web-based attacks. Many times when my team is requested by customers to examine compromised web servers that have had data stolen, it has been a result of cross-site scripting. Cross-site scripting attacks have resulted in attackers defacing websites, distributing malware to clients, and stealing sensitive information from websites, such as credit card and other personal identifiable information.
One method to check for cross-site ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access