ABSTRACT
Cross-site scripting (XSS) is the worst enemy of client script security. e Open Web Application Security Project (OWASP) TOP 10 repeatedly puts XSS at the top of its list. is chapter will discuss the principle of the XSS attack and how to properly defend against it.
