Wiki

User Tools

Site Tools

Trace:
security:xss_cross-site_scripting:about_xss

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
security:xss_cross-site_scripting:about_xss [2020/04/15 08:45] – created petersecurity:xss_cross-site_scripting:about_xss [2020/07/15 09:30] (current) – external edit 127.0.0.1
Line 1: Line 1:
-====== Security - XSS - About XSS ======+====== Security - XSS (Cross Site Scripting) - About XSS ======
  
 ===== What is XSS? ===== ===== What is XSS? =====
Line 33: Line 33:
 When the user's browser loads the page, it will execute whatever JavaScript code is contained inside the **<script>** tags.  The attacker has now succeeded with his attack. When the user's browser loads the page, it will execute whatever JavaScript code is contained inside the **<script>** tags.  The attacker has now succeeded with his attack.
  
 +----
  
 ===== What is malicious JavaScript? ===== ===== What is malicious JavaScript? =====
Line 45: Line 46:
  
 These facts combined can cause very serious security breaches, as we will explain next. These facts combined can cause very serious security breaches, as we will explain next.
 +
 +----
  
 ===== The consequences of malicious JavaScript ===== ===== The consequences of malicious JavaScript =====
Line 64: Line 67:
 To emphasize this point, some examples in this tutorial will leave out the details of a malicious script by only showing **<script>...</script>**.  This indicates that the mere presence of a script injected by the attacker is the problem, regardless of which specific code the script actually executes. To emphasize this point, some examples in this tutorial will leave out the details of a malicious script by only showing **<script>...</script>**.  This indicates that the mere presence of a script injected by the attacker is the problem, regardless of which specific code the script actually executes.
  
 +----
  
security/xss_cross-site_scripting/about_xss.1586940300.txt.gz · Last modified: 2020/07/15 09:30 (external edit)
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki