An attack in which foreign malicious script gets into a page, then runs in the visitor's browser and can steal a login or data. It is prevented by checking inputs, outputting text correctly, and the CSP header.
FAQ / Glossary
FAQ / Glossary
An attack in which foreign malicious script gets into a page, then runs in the visitor's browser and can steal a login or data. It is prevented by checking inputs, outputting text correctly, and the CSP header.