Ticket #16482: 16545-grammar-fix-revision.diff

File 16545-grammar-fix-revision.diff, 818 bytes (added by Simon Charette, 13 years ago)
  • docs/topics/security.txt

     
    1515XSS attacks allow a user to inject client side scripts into the browsers of
    1616other users. This is usually achieved by storing the malicious scripts in the
    1717database where it will be retrieved and displayed to other users, or by getting
    18 users to click a link which will cause the attacker's javascript to be executred
     18users to click a link which will cause the attacker's javascript to be executed
    1919by the user's browser. However, XSS attacks can originate from any untrusted
    2020source of data, such as cookies or web services, whenever the data is not
    2121sufficiently sanitized before including in a page.
Back to Top