XSS - Cross Site Scripting, Detection and Prevention
1 Oct. 2003
Summary
The below linked paper tries to explain what XSS (CSS) vulnerabilities are, and provides some examples on how they can be exploited in a malicious way.
Introduction:
This paper was written with no criminal intents in mind. During security audits, Michael noticed that many custom-made and third party web applications do not filter thoroughly characters, which turns them vulnerable to cross-site scripting. Cross-site scripting is a common security flaw, and it pops up several times on mailing. During both security audits and security courses, people asked how to exploit this, so that is the main reason for making this tutorial.
