https://golden-fox07.github.io/BLOG/tags/web-development/ Recent content in Web Development on Tech Cafe Hugo -- 0.147.0 en-us Sun, 28 Jun 2026 00:00:00 +0000 https://golden-fox07.github.io/BLOG/til/til_xss/til_xss/ Sun, 28 Jun 2026 00:00:00 +0000 https://golden-fox07.github.io/BLOG/til/til_xss/til_xss/ <p>So today I came across Cross Site Scripting or XSS which honestly sounds like a Counter Strike mode but is actually one of the oldest and most annoying vulnerabilities on the web. Once I understood it, I felt a little unsafe about every comment section I&rsquo;ve ever used lol.</p> <h2 id="what-is-it-actually">What is it actually</h2> <p>XSS is when a website lets someone sneak their own javascript into a page, and your browser just&hellip; runs it. no questions asked, zero trust issues, straight up &ldquo;sure i&rsquo;ll run that.&rdquo; The browser assumes any JavaScript that&rsquo;s part of the page came from the website itself, so if the site accidentally treats user input as code instead of text, it&rsquo;ll execute it. It&rsquo;s not movie hacker stuff, it&rsquo;s just a website not checking what a user typed before showing it to everyone else.</p>