XSS
Cross-site scripting is an attack where an attacker injects script that executes in another user's browser in your site's context.
Why it matters
It is the class of attack a Content-Security-Policy primarily exists to limit.
How it is measured
Confirm every interpolated value is escaped, and that the CSP restricts script sources.
Checks that involve xss
Related terms
Questions
What is xss?
Cross-site scripting is an attack where an attacker injects script that executes in another user's browser in your site's context.
Why does xss matter?
It is the class of attack a Content-Security-Policy primarily exists to limit.
How is xss measured?
Confirm every interpolated value is escaped, and that the CSP restricts script sources.