Everything About ___
Live briefing

Everything about Cross-site scripting

Security issue for web applications

Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy. XSS effects vary in range from petty nuisance to significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner network. Wikipedia →

🧭 Start here: a 6-step reading path

  1. Read the overview: Cross-site scriptingA 5-minute orientation
  2. Skim a recent paper: Detection of cross-site scripting (XSS) attacks using machine learning techniques: a reviewInfluential work since 2022
  3. Pick up a classic book: American FilmThe most-reprinted book on the subject
  4. Read the landmark paper: Cross-site scripting (XSS) attacks and mitigation: A surveyCited 153 times
  5. Go sideways: Cross-site request forgeryA closely related topic
  6. Go sideways: Code injectionA closely related topic

📖 Definitions

Noun An exploit that involves tricking a victim into executing a malicious script on a target website, so that the malicious content is trusted as though it were part of that site.

🗂️ The subject at a glance

  1. Background
  2. Types
  3. Preventive measures
  4. Notable incidents

🏆 Landmark papers (most cited)

🆕 Influential since 2022

📚 Books worth reading

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics