Cross-Site Scripting
Once again, this is a reminder that we need to learn how to walk before we can run. With the recent attacks on American companies’ websites by foreign entities (or hackers), web application security has become a top priority for most companies.
Most web sites today exhibit vulnerabilities which make them susceptible to XSS (Cross-site scripting) attacks. It only took me two minutes online to identify a handful of such web sites. So how do you prevent against XSS.
HOW TO PREVENT XSS ATTACKS
1. Filter user input
a.This will prevent things like JavaScript injection.
2. Make sure session cookies are tied with a specific IP address
a. If someone happens to steal your session cookie information, then it is rendered useless unless he/she has physical access to your computer
WELL, THERE IS ALSO CSRF
If you are interested in XSS then I believe it is also important to look at Cross-site request forgery (CSRF) which is similar to XSS but works differently.
YAY FOR WEB APP SECURITY!! LETS MAKE SECURE APPLICATIONS!!