Top "Cross-site" questions

Cross-site means the interaction cross separate domains of authority.

Setting cross-domain cookies in Safari

I have to call domain A.com (which sets the cookies with http) from domain B.com. All I do …

javascript safari cookies cross-domain cross-site
angularjs + cross-site scripting preventing

Is Angularjs takes care of XSS attack. I have read that ng-bind takes care. But When i try to do …

angularjs xss cross-site
XSS Cross Site Scripting - Jsp <Input> tag

The following piece of code in my JSP caused a cross site scripting vulnerability on the input tag. <form …

xss cross-site
A cookie associated with a cross-site resource was set without the `SameSite` attribute

Chrome is giving me the following warning: A cookie associated with a cross-site resource at http://quilljs.com/ was set …

javascript google-chrome cookies cross-site samesite
ESAPI for XSS prevention not working

I am working on fixing Cross site scripting issues in our code mainly in JSPS. Below is the original code //…

java xss fortify cross-site esapi
What is the difference between CORS and CSPs?

From my perspective, the technologies referred to as Cross-Origin Resource Sharing (CORS) and Content Security Policies (CSPs) seem to be …

security web cross-site
Customise Tumblr's *new* Like Button iFrame {LikeButton}

The new code from tumblr {LikeButton} comes with a very few options: color and size. It injects an iFrame, which …

css iframe svg tumblr cross-site
How to use Encode.forHtml() in a javascript file?

I need to use the Encode.forHtml() in a js file. i'm using the jar Recommended by OWASP - encoder-1.2.…

javascript xss owasp esapi cross-site
ASP.NET Core CORS request blocked; why doesn't my API apply the right headers?

Trying to set up CORS with authentication. I have a Web API site up at http://localhost:61000 and a consuming …

c# asp.net-core cross-site
Cross-site AJAX using jQuery

I have an existing jQuery plugin which makes a lot of AJAX calls (mostly JSON). I am wondering what is …

javascript jquery ajax cross-site