Glossary · Security
Cross-Site Scripting(XSS)
An attack that injects malicious script into a trusted website so it runs in other users' browsers.
Browse all definitionsIn detail
Cross-Site Scripting (XSS) is the class of attack where attacker controlled content (a comment, a profile field, a URL parameter) renders as executable script in another user's browser. The script then runs in the trusted site's context and can steal session cookies, modify the page, or perform requests as the victim. Defences include strict output encoding, content sanitisation libraries (like DOMPurify), modern frameworks that escape by default, and a Content Security Policy that limits what scripts can run.
Apply the definition
Want to talk through how this applies to your business?
Start with the decision in front of you. We will help map the fit.
Straight answers · no pitch deck · no commitment