Back to Glossary

XSS

XSS

البرمجة النصية عبر المواقع

GLS-000158

Intermediateauth-security1 min read
cross site scriptingcross-site scriptingscript injectionxss attack
Official DocsSign in to save & take notes

Definition

An attack where malicious JavaScript is injected into a web page and runs in other users' browsers.

هجوم يُحقن فيه JavaScript ضار في صفحة ويب ويعمل في متصفحات المستخدمين الآخرين.

Why It Matters

An XSS vulnerability on 404Fault's glossary editor (if a malicious name is saved and rendered raw) could expose all admin users.

ثغرة XSS في محرر الغلوساري في 404Fault (إذا حُفظ اسم ضار وعُرض خامًا) يمكن أن تكشف جميع مستخدمي المشرف.

Full Definition

XSS (Cross-Site Scripting) happens when an attacker injects malicious JavaScript into a page viewed by other users. The script runs with the victim's privileges, potentially stealing cookies, tokens, or form data. React prevents most XSS by escaping HTML in JSX by default. Never use dangerouslySetInnerHTML with unvalidated user content.
XSS (البرمجة النصية عبر المواقع) يحدث عندما يُحقن مهاجم JavaScript ضار في صفحة يشاهدها مستخدمون آخرون. يعمل السكريبت بامتيازات الضحية، مما قد يسرق الكوكيز أو الرموز أو بيانات النماذج. يمنع React معظم هجمات XSS بالهروب من HTML في JSX بشكل افتراضي. لا تستخدم dangerouslySetInnerHTML مع محتوى المستخدم غير المُتحقَّق منه.
Knowledge Graph

AI Builder Tips

Sign in for more features

Avoid these mistakes when using XSS:

1

Using dangerouslySetInnerHTML with unescaped user content

2

Storing auth tokens in localStorage (XSS can steal them — use HttpOnly cookies)

Sign in to unlock guided AI explanations from AI Teacher.

Generate a Prompt

Copy this prompt and use it directly with any AI model — no setup needed.

Ready-to-Use Prompt
Help me build a project using XSS.

Explain:
1. What is XSS and why it matters
2. The core architecture and required tools
3. Step-by-step implementation plan
4. Common mistakes to avoid: Using dangerouslySetInnerHTML with unescaped user content, Storing auth tokens in localStorage (XSS can steal them — use HttpOnly cookies)
5. Best practices and production tips

Official Resources

Official Documentation
Browse all AI termsCreate free account