protecting your website?
protecting your website?
Out of context: Reply #7
- Started
- Last post
- 11 Responses
- BattleAxe0
and read up on protecting your site from
XSS -Under a cross site scripting attack an
attacker injects code into your page (forum
post, shout box, etc) that contains code that
re-writes the page to do something nefariousCSRF-Under a cross site request forgery attack a
site exploits another sites persistent user
trust relationship to make something happen
<img src=http://www.amazon.com/buy/my/book
height=“1” width=“1”>
Image tags can be used to trick a browser
into making any GET request
iFrames and javascript can be combined to
trick a browser into making any POST
request