International Peer-Reviewed JournalOpen AccessISSN 2456-8880
irejournals@gmail.com+91-7433024337

Home / Current Issue / Paper 1700555

1700555PublishedVol 1 · Issue 10

Mitigating Cross Site Scripting Attacks With A Content Security Policy

R.Jyothi Y.Bhavani Sk.Mabibi S.Priyanka B. Sai Jyothi

Subject area: Science,Engineering and Technology  ·  Area of research: Computer Engineering

Abstract

A content security policy (CSP) can help Web application developers and server administrators better control website content and avoid vulnerabilities to cross-site scripting (XSS). In experiments with a prototype website, the authors' CSP implementation successfully mitigated all XSS attack types in four popular browsers. An XSS attack involves injecting malicious script into a trusted website that executes on a visitor?s browser without the visitor?s knowledge and thereby enables the attacker to access sensitive user data, such as session tokens and cookies stored on the browser.1 With this data, attackers can execute several malicious acts, including identity theft, keylogging, phishing, user impersonation, and webcam activation.

Keywords

Content Security Policy, Cross Site Scripting, Web Applications, Input Sanitizers, Mitigating, Vulnerabilities.

How to cite this paper

R.Jyothi, Y.Bhavani, Sk.Mabibi, S.Priyanka, B. Sai Jyothi "Mitigating Cross Site Scripting Attacks With A Content Security Policy" Iconic Research And Engineering Journals Volume 1 Issue 10 2018 Page 19-24
R.Jyothi, Y.Bhavani, Sk.Mabibi, S.Priyanka, B. Sai Jyothi "Mitigating Cross Site Scripting Attacks With A Content Security Policy" Iconic Research And Engineering Journals, vol. 1, no. 10, May. 2018
R.Jyothi, Y.Bhavani, Sk.Mabibi, S.Priyanka, B. Sai Jyothi (2018). Mitigating Cross Site Scripting Attacks With A Content Security Policy. Iconic Research And Engineering Journals, 1(10).
R.Jyothi, Y.Bhavani, Sk.Mabibi, S.Priyanka, B. Sai Jyothi "Mitigating Cross Site Scripting Attacks With A Content Security Policy" Iconic Research And Engineering Journals, vol. 1, no. 10, May. 2018.
@article{1700555,
      author = {R.Jyothi, Y.Bhavani, Sk.Mabibi, S.Priyanka, B. Sai Jyothi},
      title = {Mitigating Cross Site Scripting Attacks With A Content Security Policy},
      journal = {Iconic Research And Engineering Journals},
      year = {2018},
      volume = {1},
      number = {10},
      pages = {19-24},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1700555.pdf},
      abstract = {A content security policy (CSP) can help Web application developers and server administrators better control website content and avoid vulnerabilities to cross-site scripting (XSS). In experiments with a prototype website, the authors' CSP implementation successfully mitigated all XSS attack types in four popular browsers. An XSS attack involves injecting malicious script into a trusted website that executes on a visitor?s browser without the visitor?s knowledge and thereby enables the attacker to access sensitive user data, such as session tokens and cookies stored on the browser.1 With this data, attackers can execute several malicious acts, including identity theft, keylogging, phishing, user impersonation, and webcam activation.
},
      keywords = {Content Security Policy, Cross Site Scripting, Web Applications, Input Sanitizers, Mitigating, Vulnerabilities.
},
      month = {April},
  }