Cross Site Scripting (XSS)

  1. Web Security Foundations
    1. Same-Origin Policy
      1. Origin Definition and Components
        1. Policy Enforcement Mechanisms
          1. Browser Implementation Differences
            1. SOP Limitations and Exceptions
              1. XSS as SOP Bypass Technique
              2. Browser Security Model
                1. Sandboxing Mechanisms
                  1. Content Isolation
                    1. Script Execution Context
                      1. DOM Security Boundaries
                      2. HTTP Security Headers
                        1. Content-Type Header
                          1. X-Content-Type-Options
                            1. X-Frame-Options
                              1. Referrer-Policy
                                1. Cache-Control Security Implications

                              Previous

                              1. Introduction to Cross-Site Scripting

                              Go to top

                              Next

                              3. XSS Terminology and Concepts