Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
My understanding of XSS attacks focused on people entering malicious input via forms (persistant XSS attack).
However I’m trying to understand non persistant. Is this as an example (obviously the alert could be substituted for something more sinister…)
http://localhost/MyProject/action.do?Title=<script>alert('XSS');</script>
Yes, pretty much, consider if you have logged in, those script can also access your cookies and could send it to everywhere.