Multiple choice › Cross-site scripting
Cross-site scripting
1. Cross-site scripting
Which describes a cross-site scripting (XSS) attack?
- An attacker injects malicious script into a page that is then run in other users' browsers
- An attacker reads data by timing how long a CPU operation takes
- An attacker guesses passwords using a list of common words
- An attacker floods a server with requests
Answer
A
XSS = injected script executes in a victim's browser. Prevent it by sanitising or escaping user content before output.