Skip to content

Instantly share code, notes, and snippets.

@philpoore

philpoore/gist:c9cdc6ab909b0835e01e

Created November 22, 2015 18:13
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save philpoore/c9cdc6ab909b0835e01e to your computer and use it in GitHub Desktop.
Save philpoore/c9cdc6ab909b0835e01e to your computer and use it in GitHub Desktop.
Download ZIP
XSS Example
Raw
gistfile1.txt
XSS Example
===========
Okay so an example of one way that websites can be insecure is XSS.
By all means read more on wiki.
XSS == Cross Site Scripting
It works like this....
Say for example so persons website has a comment box...
When you type a comment it appears on the screen.
Say for example the website builder didnt know about the dangers of XSS, and he didnt "sanitise" his input from the comment box before showing on the site.
He's just exposed every single person on that website to XSS attacks.
An attacker could type into the comment box something like:
"<script>alert("This comapny has stopped trading.");</script>"
in the comment box.
The server would show this html as a comment on the site and the javascript inside would run.
@philpoore
Copy link
Author

Lots of examples of XSS
https://en.wikipedia.org/wiki/Cross-site_scripting

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment