All-in-One Guides:Web application security -- How to prevent attacks
Types of attacks
Cross-site scripting: XSS
-
Jeremiah Grossman on the pervasive nature of XSS
13 Jun 2007
Interview - Jeremiah Grossman, founder and chief technology officer of WhiteHat Security, talks about his new book, Cross Site Scripting Attacks: XSS Exploits and Defense; how developers and users can defend themselves against XSS; and the state of Web application...
-
Guarding against XSS in ASP.NET
Ask the Expert - Expert Dan Cornell explains how to use the tools available in ASP.NET to prevent cross-site scripting (XSS) attacks.
-
Ask the Expert - Cross-site scripting exploits can devastate Java apps. With XSS attacks on the rise, expert Ramesh Nagappan explains how to prevent these exploits in J2EE applications through proper input validation and other methods.
-
Cross Site Scripting Attacks: XSS Exploits and Defense -- Chapter 5, Advanced XSS Attack Vectors
Tip - In the past, the primary focus of XSS attack was Web applications that failed to filter user-supplied data. Researchers have since discovered that there are several other ways an attacker can inject JavaScript into a user's browser. This chapter,...