Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Cross-site scripting. An app takes attacker-supplied text and drops it into a page without escaping it, so the browser runs it as code coming from that site. The injected script can read cookies, rewrite the page, and act as the logged-in user.