Please tell me what is cross-site scripting and how is it harmful for your application.
Please tell me what is cross-site scripting and how is it harmful for your application?
Ask by Anonymous User
Updated 22 Nov 2018
XSS :
Cross-Site Scripting (XSS) is like as hacking attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. The result of XSS may range from petty nuisance like displaying an alert box to a significant security risk like stealing session cookies. Cross-Site Scripting (also referred to as XSS) is a kind of vulnerability that occurs when some hacker injects malicious code (ideally script) inside a web page or the database. OR XSS (cross-site scripting or cross-site security) is known as a type of security attack where the attacker injected the malicious code at the time of entering the data. If the hacker once gives these codes injected into the end user's browser. And if this code run on then it makes access to cookies, sessions, local files, etc. easier.
What an attacker can do?
These are some of the ways to use xss on your application that the attackers often use such as -
1). XSS
2). HTML AND CSS.
3). Scripting Languages or Codes.
4). SQL Injection.
Bypass Login Screen :
Problems and Solution
Solution
And another solution is like as -
1). Escaping 2). Validating Input 3). Sanitizing 4). You MUST use the escape syntax for the part of the HTML document you're putting untrusted data into.
The overall solution is in one word " Information is the only defense "
Thanks...!!! for reading this forum.....if any suggestion please comment.
More Read...
http://answers.mindstick.com/qa/51738/what-is-the-cross-site-scripting-and-how-it-can-harmful-for-your-application