Reflective XSS
Malicious scripts are reflected back by the server in the URL for execution. Deceiving users to click on links, all at once.
Stored XSS
Malicious scripts are stored in the database, and all users accessing the page are caught. The greatest harm.
Defense methods
Output escaped HTML special characters; CSP Content Security Policy; HttpOnly Cookie。
Disclaimer: Articles on this site come from original content, reposts, AI generation, and other sources. If there are copyright or other issues, pleaseclick here to feedback, and our company will verify and handle it promptly.