Web Security and Privacy

  1. Client-Side Vulnerabilities
    1. Cross-Site Scripting
      1. Stored XSS
        1. Reflected XSS
          1. DOM-based XSS
            1. XSS Payloads and Impact
              1. Credential Theft
                1. Session Hijacking
                  1. Defacement
                  2. Mitigation Strategies
                    1. Output Encoding
                      1. Contextual Output Encoding
                        1. Input Validation
                          1. Security Libraries
                        2. Cross-Site Request Forgery
                          1. CSRF Attack Mechanism
                            1. Exploiting User Authentication
                              1. Attack Prerequisites
                              2. Impact of CSRF
                                1. Unauthorized Actions
                                  1. Data Manipulation
                                  2. Mitigation Techniques
                                    1. Anti-CSRF Tokens
                                      1. Token Generation
                                        1. Token Validation
                                    2. Clickjacking
                                      1. Attack Mechanism using Frames
                                        1. Overlaying Malicious Content
                                          1. Social Engineering Techniques
                                          2. Mitigation
                                            1. X-Frame-Options Header
                                              1. DENY
                                                1. SAMEORIGIN
                                                  1. ALLOW-FROM
                                              2. Open Redirects
                                                1. Exploitation Techniques
                                                  1. Impact on Phishing and Credential Theft
                                                    1. Prevention Strategies
                                                    2. DOM Clobbering
                                                      1. Mechanism of DOM Clobbering
                                                        1. Security Implications
                                                          1. Prevention Techniques

                                                        Previous

                                                        2. Core Web Technologies and Security Models

                                                        Go to top

                                                        Next

                                                        4. Server-Side Vulnerabilities