TABLE OF CONTENTS
ABSTRACT-------------------------------------------------------------------------------------------- 3
CHAPTER 1- INTRODUCTION
1.1 Background--------------- -------------------------------------------------6
1.2 Theory of XSS -----------------------------------------------------------------8
1.1 Background--------------- -------------------------------------------------6
1.2 Theory of XSS -----------------------------------------------------------------8
CHAPTER 2 - Types
2.1 Persistent------------------------------------------------------------------------------11
2.2 Non Persistent--------------------------------------------------------------- -12
2.3 DOM Based------------------------------------------------------------------------13
2.4 Real World Examples-------------------------------------------------------------14
2.1 Persistent------------------------------------------------------------------------------11
2.2 Non Persistent--------------------------------------------------------------- -12
2.3 DOM Based------------------------------------------------------------------------13
2.4 Real World Examples-------------------------------------------------------------14
CHAPTER 3 - Mitigation and Prevention
3.1 Contextual Output Encoding -------------------------------------------------15
3.2 Safely Validating Untrusted HTML Input -------------------------------------------15
3.3 Cookie Security ---------------------------------------------------------------16
3.4 Disabling Scripts------------------------------------------------------------16
3.1 Contextual Output Encoding -------------------------------------------------15
3.2 Safely Validating Untrusted HTML Input -------------------------------------------15
3.3 Cookie Security ---------------------------------------------------------------16
3.4 Disabling Scripts------------------------------------------------------------16
CHAPTER 4 - Automated Tools--------------------------------------------------------------------------------------17
CONCLUSION------------------------------------------------------------------------------19
REFERENCES----------------------------------------------------------------------------------20
CONCLUSION------------------------------------------------------------------------------19
REFERENCES----------------------------------------------------------------------------------20