DZone Security Zone
What Is Cross-Site Scripting Prevention?
A Cross-site scripting attack involves the execution of malicious code on a victim’s browser. Typically, the challenges to prevent Cross-site scripting (XSS) vulnerabilities are complex, since attacks can be orchestrated at any point in a vulnerable web application. This article explores the best practices for Cross-site scripting prevention, types of attacks in modern web applications and addresses commonly asked questions.
Before we look at those areas, here is a quick introduction to how an XSS attack is orchestrated.
Read the original article: