Questions tagged [xss]
Acronym for Cross Site Scripting.
11
questions
0
votes
0
answers
13
views
Can't install sleepy puppy [closed]
I'm trying to run python setup-py install but it can't open the file. Same thing for manage.py: python manage.py setup_sleepy_puppy
You can see the commands here.
https://github.com/Netflix-Skunkworks/...
0
votes
0
answers
12
views
xsshunterexpress admin panel does'nt works
I'm trying to login at xsshunterexpress with my browser but it's displaying OOPS SOMETHING LOST.
The DNS record suppose to be type A. In the docker compose file I have to change the HOSTNAME and the ...
-1
votes
0
answers
21
views
xss hunter login page 404 not found [closed]
I have edited my question so I hope you'll better understand what I'm talking about. I'm trying to login at xsshunterexpress with my browser but it's displaying 404 not found.
The DNS record suppose ...
2
votes
2
answers
170
views
Is this document write of content fetched from another site cross site scripting or something different?
This was on a website I had to work on.
It seems to me its a horrible idea, but I was hoping to get other input before I told them it was.
var url = 'https://www.otherdomain.com/magic_php_file.php'; ...
- 21
2
votes
1
answer
1k
views
Does using HEX entities (&#xHH) in href attribute impact SEO?
Currently all the links on my website look like
<a href="/">Home</a>
<a href="/user/settings">Settings</a>
<a href="/user/...
- 195
1
vote
2
answers
625
views
Cookie security risk between primary domain and a CMS on a subdomain
Without making the question too general, I am looking to discover the specific risks associated with cookies between my primary domain hosting HTML content only, to a subdomain that is hosting Hubspot,...
- 195
1
vote
2
answers
74
views
Read-only cross origin domain request
Is it possible to allow read-only access in a CORS header? I want JS from two websites to be capable of verifying each other, but not altering each other.
- 109
3
votes
1
answer
2k
views
Pass IMG SRC via GET and echo it? Is that really secure?
I was wondering how I can make a really simple GET and echo request more secure
The code:
$src = $_GET['src'];
echo "<img src='$src' />";
Basically, I have a URL like example.com/link.php?...
- 185
3
votes
1
answer
1k
views
Is this safe? <a href=http://javascript:...>
I wonder if href and src attributes on <a> and <img> tags are always safe w.r.t. XSS attacks, if they start with http:// or https://.
For example, is it possible to append javascript: ... ...
- 427
2
votes
4
answers
231
views
How to explain XSS to common web owner/user?
How would you explain cross-site scripting vulnerability to a non-programmer (common web user)?
- 122
13
votes
5
answers
4k
views
How can I prevent a power user from calling my ajax functions?
I have a site that uses ajax calls to perform a number of functions. They have the webbrowser call back to a script - ajax.php. Though I use post data to transmit the data and limit the commands ...
- 690