[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-572803-105":53,"doc-detail-572803-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","cross-site-scripting-attacks-and-their-prevention-during-development","Cross-Site-Scripting Attacks and Their Prevention during Development","","Web applications are widely used in daily life, but they are also frequent targets for attackers exploiting common vulnerabilities. Injection flaws such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF) threaten modern web systems. This paper concentrates on XSS countermeasures by implementing attacks on a vulnerable web application and organizing defenses across the Software Development Life Cycle. Vulnerability scanners validate and analyze results before and after applying known XSS protections.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cross-site-scripting-attacks-and-their-prevention-during-development/572803/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cross-site-scripting-attacks-and-their-prevention-during-development/572803.png","ImageObject",442,249,{"name":88,"@type":89},"EvelynWrites","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",6,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What does the paper focus on regarding web application attacks?","Question",{"text":109,"@type":110},"The paper focuses on cross-site scripting (XSS) attacks and their prevention in web applications.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How are XSS countermeasures validated in the study?",{"text":114,"@type":110},"Various attacks are implemented on an XSS-vulnerable web application, and the effectiveness of countermeasures is tested using vulnerability scanners.",{"name":116,"@type":107,"acceptedAnswer":117},"Which sections does the paper include to cover background and implementation?",{"text":118,"@type":110},"Section II reviews related literature, Section III explains XSS and mitigation in the SDLC, Section IV describes implementation of attacks and countermeasures, and Section V concludes with future directions.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},572803,1792086997,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":76},687212989558,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","© 2017 IJEDR | Volume 5, Issue 3 | ISSN: 2321-9939  \nCross-Site-Scripting Attacks and Their Prevention  \nduring Development  \nMs. Daljit Kaur 1, Dr. Parminder Kaur2  \nAssistant Professor 1, Assistant Professor2  \nDepartment of Computer Science  \nLyallpur Khalsa College,Jalandhar 1, Guru Nanak Dev University Amritsar, India2  \nAbstract— Web Applications are the important and popular software systems used in almost every era of life of the human beings. At the same time, there are large number of attacks on web applications that are getting popular among attackers. Attacks like injection vulnerabilities such as SQL Injection, Cross site Scripting, Cross site Request Forgery(CSRF) are very common and threatening to the modern web applications. This paper specially focuses on countermeasures of Cross Site Scripting (XSS) vulnerability. Here, we have implemented various attacks on a XSS vulnerable web application and also classified these countermeasures with respect to Software Development Life Cycle and tested them for their effectiveness with the help of vulnerability scanners. Finally, the result of vulnerability scanners are shown and analyzed before and after the implementation of known XSS countermeasures.  \nKeywords—Cross-Site-Scripting; XSS; Attacks; Vulnerability scanners; Threats; Web application; Security  \nI. INTRODUCTION  \nWeb applications are popular on the web and so are the attacks on them. Hackers on the Internet have evolved from the greed of credit to deceit and stealing of the profitable data & identity.Security has been the critically important part of most of the web applications. the applications are often pierced with vulnerabilities, which are used by attackers to gain access to the assets of the web applications. Application layer has become the soft target of mostly attackers, as Gartner group research ([http://www.gartner.com/technology/research.jsp](http://www.gartner.com/technology/research.jsp)) reported that 75% of hacks happen on web sites targeting the application layer than network, server, database, and web server layers. Securing the Web Applications is always a great challenge as they are at high risk [1] . Organizations are spending lot on the secure access to the web applications by using additional hardware and software but the real cause of insecurity of the web applications is the applications themselves. Symantec report reveals that 76% of the scanned websites are vulnerable and it also shows that in the year 2016, more than 1.1 billion identities were stolen in data breaches, almost double the number stolen in 2015, when just over 563 million identities were stolen. This is the despite the fact that the number of data breaches actually fell between 2015 and 2016—dropping from 1,211 to 1,209[2] . SQL injection (SQLi) and Cross-Site-Scripting (XSS) attacks continues the trend of previous years and have gained more popularity through the years[3,4]. OWASP (Open Web Application Security Project) has provided Top 10 List of the most critical risks of the web applications from time to time since 2003. There have been minor changes in the major risks ofthe web applications through the years. Threats like SQLi, XSS, Data Exposure and misconfigurations are still among the top[5,6,7] . Major web services such as Google Analytics, Facebook and Twitter have had XSS issues in recent years despite intense research on the subject [8,9] .  \nThis research paper focuses on XSS vulnerability and implements various attacks that can be performed on XSS vulnerable web applications and also implements existing XSS countermeasures in Software Development Life Cycle (SDLC) to check the effectiveness of them. Section II reviews the literature for known XSS Vulnerability, attacks and its countermeasures. Section III gives the brief overview of XSS vulnerability and its mitigation in development life cycle. Section IV implements various attacks in XSS vulnerable web application. In this research work, vulnerabilit","cbCaijkTi2qIpsGr","https://ap.wps.com/l/cbCaijkTi2qIpsGr","pdf",483385,7,"English","# I. INTRODUCTION\n# II. LITERATURE REVIEW\n# III. XSS OVERVIEW AND MITIGATION IN SDLC\n# IV. IMPLEMENTATION OF XSS ATTACKS AND COUNTERMEASURES\n# V. CONCLUSION AND FUTURE DIRECTIONS","[{\"question\":\"What does the paper focus on regarding web application attacks?\",\"answer\":\"The paper focuses on cross-site scripting (XSS) attacks and their prevention in web applications.\"},{\"question\":\"How are XSS countermeasures validated in the study?\",\"answer\":\"Various attacks are implemented on an XSS-vulnerable web application, and the effectiveness of countermeasures is tested using vulnerability scanners.\"},{\"question\":\"Which sections does the paper include to cover background and implementation?\",\"answer\":\"Section II reviews related literature, Section III explains XSS and mitigation in the SDLC, Section IV describes implementation of attacks and countermeasures, and Section V concludes with future directions.\"}]","Cross-Site-Scripting Attacks and Their Prevention during Development | PDF",1791929318]