What is XSS (Cross Site Script) ?

XSS is an abbreviation of Cross Site Scripting, is a kind of security attack which uses dynamically generated web page technology to exploit. XSS gets the benefit of genuine user account to send malicious code or script on to the server by hiding it in its legitimate requests.
In XSS attack an intruder creates an account on a dynamic website to become an unsuspected user of the site, after getting the permission to sign in or sign out he or she uses some malicious script and send it to the server in its request to target the vulnerabilities, after getting accomplishment he/she can poison cookies, steal user's profile, expose SSL connection and can crash down the server. XSS attacks are created by using JavaScript, VBScript, HTML, Perl, C++ and so forth.

How to prevent XSS attacks in order to save yourself?

In order to keep your application protected from XSS attack don't allow some tags like <applet>,<script> and so forth to be execute on your application by adding some code to your application which causes the dynamic input to ignore the above particular tags .

So we have learned now, What is XSS (Cross Site Script)? and how to prevent these XSS attacks in order to save your application, keep learning from computerflicks. Please leave comments.