attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to...
32 KB (3,668 words) - 21:38, 25 May 2025
and JavaScript fetch or XMLHttpRequests, for example, can all work without the user's interaction or even knowledge. Unlike cross-site scripting (XSS),...
30 KB (3,709 words) - 13:18, 15 May 2025
HTTP cookie (redirect from Same-site cookie)
credentials) to the website to which the cookie belongs (see cross-site scripting and cross-site request forgery for examples). Tracking cookies, and especially...
93 KB (10,943 words) - 12:06, 1 June 2025
Cross-site may refer to the following network security exploits: Cross-site cooking Cross-site request forgery Cross-site scripting Cross-site tracing...
194 bytes (55 words) - 04:12, 28 December 2019
error handling than JSONP. While JSONP can cause cross-site scripting (XSS) issues when the external site is compromised, CORS allows websites to manually...
14 KB (1,503 words) - 22:12, 12 June 2025
trusted code is executed on a Web page. A common JavaScript-related security problem is cross-site scripting (XSS), a violation of the same-origin policy. XSS...
84 KB (7,900 words) - 22:09, 11 June 2025
Code injection (redirect from Script injection)
Windows. Attacking web users with Hyper Text Markup Language (HTML) or Cross-Site Scripting (XSS) injection. Code injections that target the Internet of Things...
29 KB (3,107 words) - 05:58, 25 May 2025
which must only be set by the browser. Cross origin resource sharing Same origin policy Cross-site scripting Cross-site request forgery While there are other...
65 KB (7,518 words) - 03:17, 7 June 2025
Policy (CSP) is a computer security standard introduced to prevent cross-site scripting (XSS), clickjacking and other code injection attacks resulting from...
18 KB (1,779 words) - 12:48, 27 November 2024
via cross-site scripting or other features on the website that might allow for markup injection. <a href="https://attacker.com/malicious_script.js"...
15 KB (1,734 words) - 05:56, 8 April 2024
Client-side-scripting, server-side scripting, or a combination of these make for the dynamic web experience in a browser. JavaScript is a scripting language...
107 KB (10,614 words) - 08:44, 6 June 2025
Cross-application scripting (CAS) is a vulnerability affecting desktop applications that don't check input in an exhaustive way. CAS allows an attacker...
3 KB (459 words) - 00:03, 10 December 2021
Dynamic web page (redirect from Client-side scripting)
client-side scripting must use presentation technology broadly called rich interfaced pages. Client-side scripting languages like JavaScript or ActionScript, used...
15 KB (1,811 words) - 11:24, 16 May 2025
Self-XSS (self cross-site scripting) is a type of security vulnerability used to gain control of victims' web accounts. In a Self-XSS attack, the victim...
6 KB (552 words) - 11:28, 16 April 2025
Web Messaging (redirect from Cross-document messaging)
rendered in a web browser. Prior to HTML5, web browsers disallowed cross-site scripting, to protect against security attacks. This practice barred communication...
7 KB (681 words) - 23:29, 18 November 2024
that are not expected by either the site operator or user, such as cross-site scripting. Moreover, by making sites which do not correctly assign MIME types...
5 KB (618 words) - 05:10, 29 January 2024
system. Cross-Site Scripting Cross-site scripting is a type of security vulnerability that can be found when a threat actor injects a client-side script into...
17 KB (2,007 words) - 13:02, 21 May 2025
Samy (computer worm) (category JavaScript)
known as JS.Spacehero) is a cross-site scripting worm (XSS worm) that was designed to propagate across the social networking site MySpace by Samy Kamkar....
4 KB (367 words) - 03:39, 13 June 2025
Double encoding (section Cross-site scripting)
and security filters against code injection, directory traversal, cross-site scripting (XSS) and SQL injection. In double encoding, data is encoded twice...
14 KB (1,869 words) - 03:24, 11 June 2025
relation to a cross site scripting vulnerability in Hotmail. XSS worms exploit a security vulnerability known as cross site scripting (or XSS for short)...
5 KB (623 words) - 17:51, 26 April 2025
HTML sanitization can be used to protect against attacks such as cross-site scripting (XSS) by sanitizing any HTML code submitted by a user. Basic tags...
4 KB (405 words) - 10:05, 7 December 2023
GNAA used a then-obscure phenomenon known as cross-protocol scripting (a combination of cross-site scripting and inter-protocol exploitation) to cause users...
28 KB (2,443 words) - 00:18, 26 May 2025
virus hosted at the site may be able to infect this new computer and continue propagating. Viruses that spread using cross-site scripting were first reported...
92 KB (9,552 words) - 17:59, 5 June 2025
Look up XSS in Wiktionary, the free dictionary. XSS is cross-site scripting, a type of computer security vulnerability. XSS may also refer to: XSS file...
465 bytes (97 words) - 13:11, 13 December 2024
web application's known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. Most of...
13 KB (1,327 words) - 17:10, 4 June 2025
users to modify under a developer source license. In April 2010, a cross-site scripting vulnerability in Jira led to the compromise of two Apache Software...
10 KB (849 words) - 15:23, 7 April 2025
to process it at all. This is intended to prevent attacks (e.g. cross site scripting) which may exploit a difference between the client and server in...
24 KB (2,454 words) - 05:06, 16 November 2024
containing an advertisement is usually generated by JavaScript that uses cross-site scripting (XSS), sometimes with a secondary payload that uses Adobe...
13 KB (1,633 words) - 01:29, 8 February 2025
Same-origin policy (section Read access to sensitive cross-origin responses via reusable authentication)
subdomains rather than port numbers. Cross-origin resource sharing Cross-site scripting Cross-site request forgery Site isolation Content Security Policy...
19 KB (2,180 words) - 17:27, 13 June 2025
Esoteric programming language (section GolfScript)
in a number of cross-site scripting (XSS) attacks on websites such as eBay due to its ability to evade cross-site scripting detection filters. LOLCODE...
26 KB (2,852 words) - 06:39, 13 June 2025