1.To defeat XSS attacks, a developer decides to implement filtering on the browser side. Basically, the developer plans to add JavaScript code on each page, so before data are sent to the server, it filters out any JavaScript code contained inside the data. Let’s assume that the filtering logic can be made perfect. Can this approach prevent XSS attacks? 2.What are the differences between XSS and CSRF attacks? 3.Can the secret token countermeasure be used to defeat XSS attacks? 4.Can the same-site cookie countermeasure for CSRF attacks be used to defeat XSS at- tacks? 5.To filter out JavaScript code from user input, can we just look for script tags, and remove them? If you can modify browser’s behavior, what would you add to browser, so you can help reduce the risks of XSS attacks?
1.To defeat XSS attacks, a developer decides to implement filtering on the browser side. Basically, the developer plans to add JavaScript code on each page, so before data are sent to the server, it filters out any JavaScript code contained inside the data. Let’s assume that the filtering logic can be made perfect. Can this approach prevent XSS attacks?
2.What are the differences between XSS and CSRF attacks?
3.Can the secret token countermeasure be used to defeat XSS attacks?
4.Can the same-site cookie countermeasure for CSRF attacks be used to defeat XSS at- tacks?
5.To filter out JavaScript code from user input, can we just look for script tags, and remove them?
If you can modify browser’s behavior, what would you add to browser, so you can help reduce the risks of XSS attacks?
Trending now
This is a popular solution!
Step by step
Solved in 2 steps
