XML White Papers
Scanning Ajax for XSS Entry Points
Overview The continuous adoption of Web 2.0 architecture for web applications is instrumental in Ajax, Web services and Flash, emerging as key components. Ajax is a combination of technologies such as JavaScript with the XMLHttpRequest object, DOM and XML streams. Cross site scripting (XSS) can make browsers vulnerable to critical information hijacking if exploited with malicious intent. XSS is already categorized as persistent, non-persistent and DOM-based. Ajax code loaded in browser can have entry points to XSS and it is the job of the security analyst to identify these entry points. One may need to do a trace or debug to measure the risk of these entry points. This paper introduces one to a quick way to identify XSS entry points in an application.
| Publisher | net-square | File Format | |
|---|---|---|---|
| Date Published | February 2007 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 6 users found this white paper useful
White Paper RSS
Download
Register
