Labs ICT
โญ Pro Login

Cross-Site Scripting (XSS)

Injecting malicious scripts into web pages

Client-Side Attacks

Cross-Site Scripting (XSS) allows attackers to inject malicious scripts into web pages viewed by other users.

Types of XSS

XSS Impact

Defenses

 & " ' to HTML entities before rendering
  โ†’ <script> instead of