Search⌘ K
AI Features

Introduction to Cross-Site Scripting (XSS)

Explore how cross-site scripting (XSS) attacks exploit web applications by injecting malicious JavaScript that executes in users' browsers, allowing harmful actions. Understand the mechanisms behind XSS, including script and DOM injection, and see real-world examples such as the Samy worm. This lesson helps you recognize how dynamic content can be exploited and prepares you for implementing defenses against these vulnerabilities.

Introduction

We’ve seen the knock-knock joke principle applied to SQL (SQL injection). Let’s take a look at attacks using that same principle when applied to the HTML and JavaScript in a web page. We call this attack ...