![]()
出典:Wiktionary
出典:『Wiktionary』 (2026/01/09 01:09 UTC 版)
cross-site scripting (uncountable)
出典:Wikipedia
出典:『Wikipedia』 (2011/07/20 17:24 UTC 版)
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications that enables attackers to inject client-side script into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 80% of all security vulnerabilities documented by Symantec as of 2007. Their effect may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner.