The Cross Site Scripting FAQ06/06/2002 06:01 AM Websites today are more complex than ever, containing a lot of dynamic
content making the
experience for the user more enjoyable. Dynamic content is achieved
through the use of web
applications which can deliver different output to a user depending on
their settings and needs.
Dynamic websites have a threat that static websites don't, called
"Cross Site Scripting" (or XSS
dubbed by other security professionals). Currently small informational
tidbits about Cross Site
Scripting holes exist but none really explain them to an average
person or administrator. This
FAQ was written to provide a better understanding of this emerging
threat, and to give guidance
on detection and prevention.
DevShed: A Quick Look at Cross Site Scripting01/04/2005 11:24 AM Something that's becoming more and more of an issue with the web today
is a scary little thing called "cross-site scripting". It is an,
unfortunately, all too simple way for someone to figure out how to
bypass certain restrictions on your site. Fortunately, DevShed has a new article that covers this topic and provides some
helpful hints on how to protect you and your data.
Cross Site Scripting in VBulletin forum software02/12/2004 06:15 PM Jamie Fisher (Feb 12 2004) Grok Description matches for Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 GrokA matches for Cross-Site Scripting (XSS) in Php-Nuke 7.1.0
Cross-Site Scripting (XSS) in Php-Nuke 7.1.0
The following phrases have been identified by the grok system as matching this entry: