Tech is political: The people under attack in Palestine 🇵🇸, Iran 🇮🇷, and Lebanon 🇱🇧 are people like us. They’re our brothers and sisters, too. Read up on their history, scrutinize what you’re told, and demand that they be respected and included. Hide

Frontend Dogma

“xss” News Archive

Definition, related topics, and tag feed

Definition · Supertopics: security (non-exhaustive) · “xss” RSS feed (per email)

Entry (Sources) and Additional TopicsDate#
Goodbye “innerHTML”, Hello “setHTML”: Stronger XSS Protection in Firefox 148 (moz)19
javascript, methods, security, firefox, mozilla, browsers
Escaping “<” and “>” in Attributes—How It Helps Protect Against Mutation XSS (sec)18
html, attributes, security, escaping, chrome, google, browsers
HTML Spec Change: Escaping “<” and “>” in Attributes (sec)17
html, attributes, escaping, security
How to Protect Your Web Applications From XSS (tor/w3c)16
how-tos, web-apps, security
Top 4 Web Vulnerabilities With Example and Mitigation15
security, vulnerabilities, sql, databases, csrf
Frontend Application Security: Tips and Tricks14
web-apps, security, csrf, authentication, dependencies, csp, validation, tips-and-tricks
Understanding XSS Attacks13
security
7 Required Steps to Secure Your Iframes Security12
iframes, security, html, http-headers, csp
It’s Beginning to Look a Lot Like XSSmas (24w)11
security, vulnerabilities, csrf
Building Secure JavaScript Applications10
javascript, security, csrf, json-web-tokens, passwords
mXSS (gaz)9
html, security
Brad Hill: “HTML5 Security Realities” (chr/css)8
slides, security, html
Cross-Site Scripting Attacks (XSS)7
security, examples
What Is Cross Site Scripting or XSS? (chr/css)6
javascript, security, concepts
Cookies and Security (nza)5
cookies, security, csrf
Simon Willison, @Media Ajax (mic/aja)4
ajax, csrf, javascript, json, security
Cross Site Scripting Joy (tri)3
security
Prepare for Attack—Making Your Web Applications More Secure2
web-apps, security, sql, examples
DIY Widgets—How to Embed Your Site on Another Site1
how-tos, embed-code, javascript