The Cross Site Scripting FAQ06/06/2002 06:01 AM Websites today are more complex than ever, containing a lot of dynamic
content making the
experience for the user more enjoyable. Dynamic content is achieved
through the use of web
applications which can deliver different output to a user depending on
their settings and needs.
Dynamic websites have a threat that static websites don't, called
"Cross Site Scripting" (or XSS
dubbed by other security professionals). Currently small informational
tidbits about Cross Site
Scripting holes exist but none really explain them to an average
person or administrator. This
FAQ was written to provide a better understanding of this emerging
threat, and to give guidance
on detection and prevention.
DevShed: A Quick Look at Cross Site Scripting01/04/2005 11:24 AM Something that's becoming more and more of an issue with the web today
is a scary little thing called "cross-site scripting". It is an,
unfortunately, all too simple way for someone to figure out how to
bypass certain restrictions on your site. Fortunately, DevShed has a new article that covers this topic and provides some
helpful hints on how to protect you and your data.
Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity