#javascript

Cross Site Scripting (XSS): Running Your Code in Someone Else's Browser

XSS lets an attacker run JavaScript in another user's browser session, in the context of a site they trust. Here are the three types, what they enable, and how to stop them.