All original content is created in Ukrainian. Not all content has been translated yet. Some posts may only be available in Ukrainian.Learn more

What is Cross-Site Scripting (XSS)?

Table of contentsClick link to navigate to the desired location
This content has been automatically translated from Ukrainian.
Cross-Site Scripting (XSS) is a type of attack on web application security, where an attacker injects JavaScript code into a web page or web application, which is then executed in the user's browser. An XSS attack occurs when a web application does not properly handle input data and allows it to be executed in the context of the user viewing the page. There are three main types of XSS.

Stored XSS

The malicious code is stored on the server and displayed to users who view a specific page.

Reflected XSS 

The malicious code is added to the URL and sent to the server, which outputs it in response. Users are affected when they click on such links.

DOM-based XSS

An attack where the malicious code is executed in the browser itself, usually by modifying the DOM structure of the page using JavaScript.

This post doesn't have any additions from the author yet.

Dec 23, '23 10:34

What is the difference between PUT and PATCH?

@memecode
Dec 23, '23 11:29

What are cookies?

@memecode
Dec 23, '23 11:40

What is a session? (Web)

@memecode
Dec 24, '23 12:08

What is penetration testing?

@memecode
Dec 24, '23 12:08

What is SQL Injection?

@memecode
What is DOM?
Dec 24, '23 12:22

What is DOM?

@memecode
Dec 27, '23 15:08

What is an ERP system?

@memecode
Dec 27, '23 15:32

What is identification and authentication, and what is the difference?

@memecode
Dec 27, '23 15:38

What does SIM mean and how does a SIM card work?

@memecode
Dec 27, '23 15:41

What is e-SIM? Key features and advantages

@memecode
Dec 29, '23 10:22

What is Automatic Speech Recognition (ASR)?

@memecode
Dec 29, '23 10:30

What is NLP? What is Natural Language Processing used for?

@memecode