Mitigation of XSS
Understand how to protect web applications from Cross-Site Scripting (XSS) attacks by exploring secure coding practices, input filtering, and using Content Security Policies. This lesson helps you develop skills to mitigate vulnerabilities that arise from user input and coding weaknesses by applying practical defenses with modern frameworks and security tools.
Overview
XSS attacks can be truly annoying, especially since most are due to shoddy coding practices. With the examples discussed in the previous lesson, we can easily infer how much damage someone with malicious intent can cause. Fortunately, most XSS-related vulnerabilities can be addressed by just writing good code and simple manual checks. Tools like OWASP ZAP can also work quite nicely (since it has a good success rate with Juice Shop).
Mitigation methods
Let’s look at a few golden rules that need to be kept in mind when coding web applications. ...