// glossary entry
XSS (Cross-Site Scripting)
Definition: An attack technique in which malicious JavaScript code is injected into a website, usually via comment fields or forms, and executed in the next visitor’s browser.
Everyday analogy: It’s like someone posting a fake notice on a club’s bulletin board that tricks every reader into opening their wallet.
How we use this: In our security audit, we check input validation in all forms. A Content Security Policy (CSP) is a mandatory configuration for added protection.
// synonyms
- XSS
- Cross-Site Scripting
Is the term still unclear?
Let's talk for 15 minutes
If a term in this glossary isn't entirely clear in the context of your project, or if you want to know whether the concept is relevant to your situation—just ask us. The initial consultation is free and non-binding.