
6 Chapter 1
9
Cross-site Scripting Fundamentals
Web application security is a large topic encompassing many disciplines, technologies,
and design concepts. Normally, the areas we're interested in are the software layers from the
Web server on up the vulnerability stack as illustrated in Figure 1.1. This includes application
servers such as JBoss, IBM WebSphere, BEA WebLogic, and a thousand others. Then we
progress in the commercial and open source Web applications like PHP Nuke, Microsoft
Outlook Web Access, and SAP. And after all that, there are the internal custom Web applica-
tions that organizations ...