Tag: xss

Found 610 results for 'xss'.

---

1) web-application - CSRF Protection on static pages
2) web-application - Why can't persistence XSS be detected by a Web Application Firewall?
3) xss - CSRF tokens for a JWT-auth system using cookies
4) xss - Why aren't sessions exclusive to an IP address?
5) xss - Would using Google reCAPTCHA allow Google to cheat?
6) linux - How do I figure out how malware infected my server, and the subsequent sites on the server?
7) web-application - HOW is the malicious URL/payload is delivered to the user on a DOM based XSS attack?
8) web-application - Reflected XSS script passing through URL how to make it work and what are the preconditions for it to work?
9) xss - Is XSS via MIME sniffing a Stored or Reflected XSS?
10) xss - DOMXSS - Is Input Field Content an Attack Vector?
11) xss - Injecting <script>alert("1")</script> to OWASP Juice shop doesn't work
12) xss - DOM XSS attack failing in Firefox
13) xss - How to perform XSS in hidden HTML input fields using accesskey?
14) xss - Facebook's warning of self-xss
15) xss - XSS - Using firebug to inject Scripts
16) web-application - Can CSRF protection work even if an XSS vulnerability exists?
17) xss - exploiting XSS in jQuery selector
18) xss - DOM based XSS using window.location.hash
19) xss - How should I mitigate the XSS vulnerabilities in KnockoutJS described at mustache-security?
20) xss - Understanding POST based XSS
21) webserver - Possible issues when one or more cookie not HttpOnly
22) xss - Split a JWT between payload and signature
23) xss - JWT cookie with CSRF token as a claim inside the JWT
24) xss - exploiting CSRF in ajax request via XSS flaw
25) xss - http_only for cookies with JWT tokens
26) xss - Is Django's built-in CSRF protection enough?
27) xss - Will same-site cookies be sufficient protection against CSRF and XSS?
28) web-application - Calling JavaScript functions from within a Style tag XSS
29) web-application - Persistent XSS in Blogger domain
30) xss - XSS - history stealing
31) xss - XSS vulnerability in raw script response?
32) xss - ASP.NET Web API and potential XSS
33) web-application - If an input field accepts <% data then how can one say there is risk of stored XSS
34) appsec - Is this an example of XSS attack?
35) web-application - Could a request sent by a XSS attack in a change password module be cosidered as a CSRF?
36) xss - How can javascript files represent a flash-based XSS vulnerability?
37) php - Stored XSS + PHP Backdoor + File upload vulnerability
38) web-application - XSS vulnerability through burp suite
39) xss - Unable to upload a file on xss vulnerable page
40) xss - Is it possible to read and extract HTTP request headers via JavaScript while performing XSS & CSRF? If so, how?
41) php - Are PHP Sessions based on cookies or a cookie-IP pair?
42) xss - Is this injected JavaScript code and how to prevent it from appearing once uploaded?
43) web-application - Does using creating a seprate firefox profile cause a seprate security context protect against XSS and DNS Re-binding?
44) xss - IFrame Vulnerability Classification
45) web-application - XSS via JSON: Why does a web application not sanitize either its incoming params hash or its outgoing JSON values of malicious tags like Script?
46) xss - Does CSRF prevention also prevent reflected XSS attack?
47) web-application - Evaluating security of 3rd party <script>
48) web-application - Can XHR patching prevent XSS side-effects?
49) web-application - Does setting httponly prevent stealing a session using XSS?
50) xss - Authentication with JWT

---