Cross Site Scripting

Cross Site Scripting

Hi, in this part of Extreme Vulnerable Node Application (XVNA) we will see how the XSS is been executed. As we know we are running on Expressjs and angularjs so there is only few method in angularjs on which XSS could be executed.


Let’s see how we cracked XSS in XVNA.

Extreme vulnerable node application is available at Github https://github.com/vegabird/xvna and you can download it and test on your localhost.

Prevention:

To avoid the XSS(Cross Site Scripting), we need to sanitize the user input, we can also escape the HTML character which will solve the XSS.


    • Related Articles

    • OWAP TOP 10 2017

      Application Security Risk 2017 The OWASP top ten has been changed and following list is the updated. A1:2017 – Injection A2:2017 – Broken Authentication A3:2017 – Sensitive Data Exposure A4:2017 – XML External Entities (XXE) A5:2017 – Broken Access ...

    • DOM XSS

      Hi, In this part of Damn Vulnerable Web Application. (DVWA) we will see how the DOM XSS is been executed. DOM Based XSS simply means a Cross-site scripting vulnerability that appears in the DOM (Document Object Model) instead of part of the HTML. ...

    • Common web application attacks and quick steps to prevent them

      Management needs to take care of the security, especially the security of your sensitive customer information’s. It’s so often only the most high profile  or sophisticated attacks that you actually hear about , but the reality is there are n number ...

    • Web security issues you need to be concerned

      1. SQL Injection (SQLi) The SQL injection is the most common web security issue faced by most of the companies. An SQL injection is the injection attack where hackers can input malicious SQL queries to pull sensitive data from the database. These SQL ...

    • Common website vulnerabilities

      These are the some common website vulnerabilities found during the vulnerability scan. Always developers need to plan to block these loop holes for eliminating these following common vulnerabilities. 1. SQL INJECTIONS SQL injection is a type of web ...