Cross-site scripting; a type of vulnerability in web applications which allows attackers to inject arbitrary JavaScript or other client-side code into webpages.

learn more… | top users | synonyms

1
vote
0answers
39 views

Beef installation problem in Windows 10 - 64 bit

I am trying to install Beef in a WIndows 10 - 64 bit PC. I followed the instructions provided in the following link: https://github.com/beefproject/beef/blob/master/INSTALL.txt But I keep getting ...
0
votes
0answers
35 views

How does Chrome/Firefox/ie10+ handle cross protocol HTTP requests?

I've been writing a webpage that makes use of an online API that only outputs JSON, and is only served from an SSL server. (It's the Eventbrite API). And my personal web server does not support SSL. ...
1
vote
1answer
236 views

How can I use bookmarklets in IE11 that involve cross-site scripting?

I'm trying to use some bookmarklets that involve loading javascript from a trusted website. In particular, OpenSpritz and Squirt I have Squirt working in Chrome, but I use IE11 for the most part. ...
0
votes
2answers
58 views

Can XSS and phising type attacks jump across browsers?

If I had two different browsers and separated their use such that I was only ever using browser A for things such as on-line banking and credit card purchases etc. And used browser B for everything ...
1
vote
3answers
4k views

Yahoo Mail vulnerability resulting in emails with no subject and a single link

Lately I've gotten random emails from friends with Yahoo Mail (or sbcglobal.net, which uses Yahoo Mail) without a subject and some random URL that I'm not going to click on. At first I thought that ...
1
vote
1answer
4k views

How do I disable XSS/“Same Origin” checking on Chrome?

I am trying to access the contents of HTML tags within an iframe on a page I am developing. The parent and iframed pages have the same root domain, but different subdomains. I cannot alter the iframed ...