Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) is a web security vulnerability where attackers inject malicious scripts into web pages. This could happen when the user input isn't properly validated, allowing scripts, often in JavaScript, to execute in other users' browsers. This can lead to unauthorized access, data theft, or other malicious activities.

Example

Yahoo suffered from an XSS attack that affected its advertising network. Attackers were able to inject malicious code into Yahoo ads, leading to the distribution of malware to users who viewed the compromised ads.

Links

• Yahoo Mail Allegedly Hacked via XSS Exploit
• Cross Site Scripting (XSS) | OWASP Foundation
• What is cross-site scripting (XSS) and how to prevent it?

Cards

Data-validation-&-encoding

• Data-validation-&-encoding 2
• Data-validation-&-encoding 4
• Data-validation-&-encoding 5
• Data-validation-&-encoding 6
• Data-validation-&-encoding 7
• Data-validation-&-encoding 8
• Data-validation-&-encoding 9
• Data-validation-&-encoding J
• Data-validation-&-encoding Q
• Data-validation-&-encoding K
• Data-validation-&-encoding A

Authentication

• Authentication 8
• Authentication J

Authorization

• Authorization 5
• Authorization 6
• Authorization 7
• Authorization 8
• Authorization Q
• Authorization A

Session-management

• Session-management 2
• Session-management 3
• Session-management 4
• Session-management 6
• Session-management 7
• Session-management 9
• Session-management Q

Cryptography

• Cryptography 8

Cornucopia

• Cornucopia 9
• Cornucopia Q
• Cornucopia A

View source on GitHub