CS Fundamentals Trainer · JavaScript · Security

Put the steps of a stored XSS attack in order, first to last.

  1. A victim opens the page that lists the comments
  2. The attacker submits a comment containing `<img src=x onerror=...>`
  3. The server inserts the comment into the HTML response without encoding it
  4. The server saves the comment in its database unchanged
  5. The victim's browser parses the markup and runs the handler in the site's origin

Difficulty: easy

Answer this question

Related questions