Cross-site Scripting Prevention

An anonymous reader writes "Cross-site scripting (XSS) occurs when an attacker introduces malicious scripts to a dynamic form that allows the attacker to capture the private session information. This article casts light on the areas vulnerable to XSS exploitation, explains how the user can protect himself, and details what the webmaster can do to secure a site from this type of malicious intrusion."

Comments

site redirects

[stonebeat.org]

hehe.. this reminds of the time, when people used to embed redirects tags like:

<meta HTTP-EQUIV="Refresh" CONTENT="0;URL=http://www.xml-dev.com">

in messages on the online forums. I know Hypernews was vulnerable to this attack.