GLOSSARY / DEFINITION

Cross-site scripting

Injection of content executed in a browser within a trusted site's context. Defences need context-appropriate output encoding and safe untrusted-HTML handling.

Sources and review

Reviewed:

Back to glossary