PREVENTION FROM CROSS-SITE SCRIPTING ATTACKS (XSS) The attack is basically a type of code injection attack which is made possible by incorrectly validating user data, which usually gets inserted into the page through a web form or using an altered hyperlink. The code injected can be any malicious client-side code, such as JavaScript, VBScript, HTML, CSS, Flash, and others. The code is used to save harmful data on the server or perform a malicious action within the user’s browser. There are following steps to prevent form an XSS attacks Step 1: Escape Output Provided by Users Step 2: Always Use XHTML Step 3: Only Allow Alphanumeric Data Values in CSS and JavaScript Step 4: URL-Encode URL Query String Parameters.......
Posted on: Sat, 14 Sep 2013 17:17:11 +0000
Trending Topics
Recently Viewed Topics
© 2015