A comprehensive tutorial on cross-site scripting Created by Jakob Kallin and Irene Lobo Valbuena OverviewXSS AttacksPreventing XSSSummary Part One: Overview What is XSS? Cross-site scripting (XSS) is a code injection attack that allows an attacker to execute malicious JavaScript in another user's browser. The attacker does not directly target his victim. Instead, he exploits a vulnerability in a w
![Excess XSS: A comprehensive tutorial on cross-site scripting](https://cdn-ak-scissors.b.st-hatena.com/image/square/644b93d5d1967d239d8534f87cf27566c501e102/height=288;version=1;width=512/http%3A%2F%2Fexcess-xss.com%2Fdom-based-xss.png)