Cross Site Scripting 2.3

Question 1

Cross-Site Scripting (XSS)

Answer 1

• Most common web app vulnerabilities.
• Takes advantage of the user’s trust in a web site.
• Attackers can include a script in their input and have it rendered as part of the web process.

Question 2

Non-Persistent XSS Attack

Answer 2

• 3rd party site configured to enable someone to run a script
• The injected script is not persisted or stored but rather is immediately executed.
• Passed back via the web server.

Question 3

Persistent Stored XSS Attack

Answer 3

• Script is permanently stored on the web server or some back-end storage.
• Allows the script to be used against others who log in to the system.

Question 4

Protection Against XSS Attack

Answer 4

• Be careful when clicking untrusted links.
• Consider disabling Javascript.
• Keep your browser and applications updated.