// glossary entry
XSS (Cross-Site Scripting)
Definition: An attack technique in which malicious JavaScript code is injected into a website, usually via comment fields or forms, and executed in the next visitor’s browser.
Everyday analogy: It’s like someone posting a fake notice on a club’s bulletin board that tricks every reader into opening their wallet.
How we use this: In our security audit, we check input validation in all forms. A Content Security Policy (CSP) is a mandatory configuration for added protection.
// synonyms
- XSS
- Cross-Site Scripting
Is the term still unclear?
Let's talk for 15 minutes
If a term in this glossary isn't entirely clear in the context of your project, or if you want to know whether the concept is relevant to your situation-just ask us. The initial consultation is free and non-binding.