Cross Site Scripting (XSS)

  1. XSS Terminology and Concepts
    1. Attack Components
      1. Attacker Role and Capabilities
        1. Victim Characteristics
          1. Vulnerable Application Properties
            1. Attack Surface Analysis
            2. Technical Terminology
              1. Payload Definition and Structure
                1. Injection Point Identification
                  1. Source and Sink Concepts
                    1. Execution Context
                      1. Reflection vs Persistence
                      2. Data Flow Concepts
                        1. Input Validation Points
                          1. Output Encoding Locations
                            1. Sanitization Processes
                              1. Canonicalization Requirements
                                1. Trust Boundaries

                              Previous

                              2. Web Security Foundations

                              Go to top

                              Next

                              4. XSS Attack Classification