CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ278

VerifiedCloud Application Security

Which of the following threat types entails sending untrusted data to a user's browser for execution with that user's own credentials and access?

Explanation

Cross-site scripting (XSS) injects untrusted script or markup into a web page so that a victim’s browser executes it in the trusted site’s context. The script can therefore act with the victim’s authenticated session and available access.

Community Discussion

No comments yet. Be the first to start the discussion!