search

cwong-scw / action-playground

0 stars 2 forks source link

dazradavsgre #32

Open cwong-scw opened 3 years ago

cwong-scw commented 3 years ago

tstst dom based xss

temp-scw-app[bot] commented 3 years ago

Micro-Learning Topic: DOM-based cross-site scripting (Detected by phrase)

What is this? (2min video)

DOM-based cross-site scripting vulnerabilities occur when unescaped input is processed by client-side script and insecurely written into the page Document Object Model (DOM). This will result in immediate changes to the page, potentially without any call to the server. When HTML or script is included in the input, it will be processed by a user's browser as HTML or script and can alter the appearance of the page or execute malicious scripts in their user context.

Try this challenge in Secure Code Warrior

Micro-Learning Topic: XSS (Detected by phrase)

What is this? (2min video)

Reflected cross-site scripting vulnerabilities occur when unescaped input is displayed in the resulting page displayed to the user. When HTML or script is included in the input, it will be processed by a user's browser as HTML or script and can alter the appearance of the page or execute malicious scripts in their user context.

Try this challenge in Secure Code Warrior