protect
Cross-site scripting
Cross-site scripting ( XSS ) is a type of computer security vulnerability typically found in Web applications . XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy .
This article is focused on providing application security testing professionals with a guide to assist in Cross Site Scripting testing. The initial contents of this article were donated to OWASP by RSnake, from his seminal XSS Cheat Sheet, which was at: http://ha.ckers.org/xss.html . That site now redirects to its new home here, where we plan to maintain and enhance it.
XSS (Cross Site Scripting) Cheat Sheet
June 8th 2011 Cross-Site Scripting (XSS) is a type of attack where a hacker attempts to inject client-side scripting into a webpage that others are able to view. The attack could be as simple as an annoying alert window or as sophisticated as stealing a logged in user's credentials (commonly saved in browser cookies). With a user's credentials, a hacker could gain access to sensitive parts of your website or web application.
How To Protect Your Site From XSS With PHP