OWASP Top 10: A7 - Cross-site Scripting
OWASP 2021
| Intermediate
- 7 videos | 36m 24s
- Includes Assessment
- Earns a Badge
Most web apps accept some kind of input, whether from users or through other automated means. All app input must be treated as untrusted and must be vigorously validated to ensure application and data integrity. In this course, you'll learn the difference between Java and JavaScript, as well as what cross-site scripting is and how it can compromise a web site and its visitors. Next, you'll learn how to execute various XSS attacks against an intentionally vulnerable virtual machine, including through web forms. You'll also explore how to use XSS to hijack a user web browser and how to mitigate XSS attacks.
WHAT YOU WILL LEARN
-
discover the key concepts covered in this course
describe how Java and JavaScript are used in web applications
recognize how Cross-site Scripting (XSS) attacks occur
run a XSS attack through web page forms -
run a XSS attack to hijack a client web browser
deploy security controls to mitigate XSS attacks
summarize the key concepts covered in this course
IN THIS COURSE
-
1m 30s
-
6m 23s
-
3. Cross-site Scripting Attacks6m 14s
-
4. Executing XSS through Web Page Forms6m 7s
-
5. Compromising a Web Browser through XSS9m 38s
-
6. Mitigating XSS Attacks5m 35s
-
7. Course Summary56s
EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE
Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.
Digital badges are yours to keep, forever.
