Security

What is Cross-site scripting?

Also called: XSS

Cross-site scripting is an attack where a website shows attacker-supplied input as HTML or JavaScript, so the script runs in other users’ browsers. It is prevented by escaping output and avoiding raw HTML rendering of user content.