OWASP Top 10: A7 – Cross-site Scripting

Most web apps accept some kind of input whether from users or through other automated means. All app input must be treated as untrusted and must be vigorously validated to ensure application and data integrity. In this course youll learn the difference between Java and JavaScript as well as what cross-site scripting is and how it can compromise a web site and its visitors. Next youll learn how to execute various XSS attacks against an intentionally vulnerable virtual machine including through web forms. Youll also explore how to use XSS to hijack a user web browser and how to mitigate XSS attacks.