Cross-site scripting
Injection of content executed in a browser within a trusted site's context. Defences need context-appropriate output encoding and safe untrusted-HTML handling.
Sources and review
Reviewed:
Injection of content executed in a browser within a trusted site's context. Defences need context-appropriate output encoding and safe untrusted-HTML handling.
Reviewed: