Software Security and Cross-Site Scripting (XSS)

This set of flashcards covers critical terms and concepts related to software security and Cross-Site Scripting (XSS).

Software Security

A field focused on developing and maintaining software applications to protect them from threats, vulnerabilities, and unauthorized access.

Software Threats

Potential dangers that can exploit vulnerabilities in software applications.

Software Vulnerability

Weaknesses in software applications that can be exploited by threats.

Mitigation

Strategies and measures taken to address vulnerabilities and protect against threats.

Access Controls

Security measures that ensure only authorized users can access specific data.

Cross-Site Scripting (XSS)

A type of injection attack where malicious scripts are injected into trusted websites.

Stored XSS

A persistent XSS attack where malicious content is injected and stored in the target application.

Reflected XSS

An XSS attack where malicious code is executed via an HTTP response and does not persist.

DOM XSS

An attack occurring when client-side JavaScript writes untrusted data to a page without proper sanitization.