Security Problems on Java Script technology

Security Problems on Java Script technology

JavaScript or JS when abbreviated is a prototype-based scripting language that is weakly typed, dynamic, and has first-class functions. It is a multi-paradigm language, supporting object-oriented, imperative, and functional programming styles. Cross-site scripting is a common JavaScript-related security problem or simply XSS which is a violation of the same-origin policy. XSS vulnerabilities occur when an attacker is able to cause a target web site, such as an online banking website, to include a malicious script in the webpage presented to a victim.

The script in this example can then access the banking application with the privileges of the victim, potentially disclosing secret information or transferring money without the victim's authorization. A solution to XSS vulnerabilities is to use HTML escaping whenever displaying untrusted data. Some browsers include partial protection against reflected XSS attacks, in which the attacker provides a URL including malicious script.