Imagen de Portada
Código QR

Securing the Tangled Web.

The article provides an overview of how cross-site scripting (XSS) vulnerabilities emerge and why it is so difficult to avoid the problem in real-world Web application software development. Topics discussed include the traditional advice to prevent XSS, the existing approaches to the prevention and...

Descripción completa

Publicado en:Communications of the ACM Vol. 57; no. 9; pp. 38 - 48
Autor principal: KERN, CHRISTOPH
Formato: Artículo
Publicado: Association for Computing Machinery Sep2014
Materias:
Computer software development
Web-based user interfaces
Web design
Computer viruses
Computer networks
Google Inc.
Acceso en línea:Ver este registro en EBSCOhost
Sumario:The article provides an overview of how cross-site scripting (XSS) vulnerabilities emerge and why it is so difficult to avoid the problem in real-world Web application software development. Topics discussed include the traditional advice to prevent XSS, the existing approaches to the prevention and detection of XSS, and the concept of strictly contextually auto-escaping template engines. Also discussed is an approach developed by Internet company Google to limit code that could potentially give rise to XSS vulnerabilities.