[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573772-105":53,"doc-detail-573772-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","important-factors-to-remember-when-constructing-a-cross-site-scripting-prevention-mechanism","Important Factors to Remember When Constructing a Cross-Site Scripting Prevention Mechanism","","Web application security is critical because sensitive data such as usernames, passwords, and credit-card details attract attackers; cross-site scripting (XSS) is one prominent vulnerability. A literature review searched Scopus-indexed articles from 2008–2020 using terms like “XSS attack prevention” and “XSS prevention” to assess strengths and weaknesses, including structural issues and deployment locations. From 25 selected studies, 14 provided suitable XSS mitigation techniques, including tool-based validation pipelines, server-side solutions, and automatic mitigation approaches, guiding future XSS defenses.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/important-factors-to-remember-when-constructing-a-cross-site-scripting-prevention-mechanism/573772/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/important-factors-to-remember-when-constructing-a-cross-site-scripting-prevention-mechanism/573772.png","ImageObject",442,249,{"name":88,"@type":89},"Eliana","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-16","2026-10-14",true,{"@type":98,"interactionType":99,"userInteractionCount":73},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the main purpose of the study described in the document?","Question",{"text":108,"@type":109},"To conduct a literature review of XSS prevention techniques, focusing on strengths and weaknesses, structural issues, and deployment location in web applications.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"How many articles were identified as providing suitable XSS prevention techniques, and from how many selected?",{"text":113,"@type":109},"Fourteen articles were identified among 25 selected articles as providing suitable prevention techniques for XSS attacks.",{"name":115,"@type":106,"acceptedAnswer":116},"What are the three types of XSS attacks mentioned, and what is the key distinction?",{"text":117,"@type":109},"The document describes stored XSS (malicious script stored on the server), reflected XSS (injected code reflected to the browser via crafted links), and DOM-based XSS (the vulnerability appears in the DOM rather than the HTML part).","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},573772,1792114187,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":73,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":76},4398048949847,"https://ap-avatar.wpscdn.com/avatar/400002536579ef2da7f?_k=1778318612642679267","Important factors to remember when constructing a cross-site scripting prevention mechanism  \nMd. Maruf Hassan1,2, Badlishah R. Ahmad2, Ashrafia Esha1, Rafika Risha1, Mohammad S. Hasan3  \n1Department of Software Engineering, Daffodil International University, Dh aka, Bangladesh 2School of Computer and Communication Enginering, Universiti Malaysia Perlis (UniMAP), Perlis, Malaysia 3School of Digital, Technologies and Arts, Staffordshire University, Stoke-on-Trent, Stafford, United Kingdom  \n\n| Article history:\u003Cbr>Received Aug 5, 2021 Revised Dec 20, 2021 Accepted Feb 5, 2022 | Web application has become an essential part of daily activities to provide easy accessibility that ensures better performance. It is a platform where sensitive information such as username, password, credit card details, operating system and software [version. is](version. is) stored that attracts intruders to generate most of their attacks. Intruders can steal valuable data by compromising web application security flaws; cross site scripting (XSS) vulnerability is one of these. Several studies have been conducted in order to prevent the XSS vulnerability. In this research, we searched Scopus Indexed articles published in the last 11 years (between 2008 and 2020) using two keywords (“XSS attack prevention” and “XSS prevention”) . The purpose of this study was to conduct a literature review on XSS prevention techniques e.g., strengths and weaknesses, including structural issues and real-time deployment location in order to extract valuable information. This review identified 14 articles among the 25 selected articles that provided various suitable prevention techniques for XSS attacks. Seven articles are based on tools that have been implemented and take into account design, coding, testing, and integrating validation processes, six articles are about server site solutions, and one is about automatic mitigation solutions. As a result, this research will be invaluable in guiding the advancement of XSS prevention techniques.\u003Cbr>This is an open access article under the CC BY-SA license.\u003Cbr>|\n| --- | --- |\n| Keywords:\u003Cbr>Cross site scripting\u003Cbr>Cyber security Web application vulnerability XSS prevention |  |\n\nCorresponding Author:  \nMd. Maruf Hassan  \nDepartment of Software Engineering, Faculty of Science and Information Technology Daffodil International University, 102, Shukrabad, Mirpur Road, Dhaka-1207, Bangladesh [Email: maruf.swe@diu.edu.bd](Email: maruf.swe@diu.edu.bd)  \nArticle Info ABSTRACT  \n1. INTRODUCTION  \nWeb applications are a mandatory requirement for businesses, organizations, and customer-behavior solutions in order to provide easy access and improved performance to their target users in modern life. Security is a major concern in web applications since they contain personal data and information about people. The most common web application vulnerabilities, as per the open web application security project (OWASP) are injection, broken authentication and session management, cross-site scripting (XSS), broken access control, security misconfiguration, sensitive data exposure [1] . XSS is a client-side code injection attack that allows an attacker to execute malicious JavaScript in the browser of another user by injecting vulnerable web application pages. When a random user visits the compromised page, the page will deliver the malicious script into the victim's browser and execute it. Three types of XSS attacks and their removal techniques are; (i) an attacker injects a malicious script which is permanently stored on the targeted database server–stored XSS vulnerability; (ii) users also inject XSS attacks via phishing emails and other websites  \nwhen they get a request from a crafted link, after clicking these links the injected code reflects the attack to the user’s browser – reflected XSS attacks or XSS Type-I attack; (iii) document object model (DOM) based XSS simply means an XSS vulnerability that appears in the DOM instead of the HTML part","cbCair6aSOZ2iObc","https://ap.wps.com/l/cbCair6aSOZ2iObc","pdf",529251,9,"English","# Article history\n# Abstract\n# 1. Introduction\n# 2. Relevant Research Works\n# 3. Methods\n# 4. Result, Evaluation, and Discussion\n# 5. Conclusion","[{\"question\":\"What is the main purpose of the study described in the document?\",\"answer\":\"To conduct a literature review of XSS prevention techniques, focusing on strengths and weaknesses, structural issues, and deployment location in web applications.\"},{\"question\":\"How many articles were identified as providing suitable XSS prevention techniques, and from how many selected?\",\"answer\":\"Fourteen articles were identified among 25 selected articles as providing suitable prevention techniques for XSS attacks.\"},{\"question\":\"What are the three types of XSS attacks mentioned, and what is the key distinction?\",\"answer\":\"The document describes stored XSS (malicious script stored on the server), reflected XSS (injected code reflected to the browser via crafted links), and DOM-based XSS (the vulnerability appears in the DOM rather than the HTML part).\"}]","Important Factors to Remember When Constructing a Cross-Site Scripting Prevention Mechanism | PDF",1791945590]