Cross-site scripting, often abbreviated XSS, is a class of Web security issues. A recent research report stated that XSS was now the top security risk.

In a typical XSS scenario, a Web page might use JavaScript to dynamically generate some document content based on a field in a Uniform Resource Identifier (URI). In the normal course of events, the site itself would generate legitimate information for that field.

At Computerworld.

[ Read more ]