Cross Site Scripting (XSS) Exploits & Defenses - OWASP Foundation

Allows embedding of malicious code: JavaScript (AJAX!), VBScript, ActiveX, HTML, or Actionscript (Flash) Threats: phishing, session hijacking, changing of user settings, impersonation attacks, execution of code on the client, etc. XSS Types. ................
................

In order to avoid copyright disputes, this page is only a partial summary.