Browser & Web Performance · Junior · Question 59 of 75

What is cross-site scripting (XSS)?

1A browser bug that mixes styles between sites
2A script that is loaded from another domain on purpose
✓Correct answer: An attacker gets their script to run in your page, in the context of your origin

Explanation

The injected script can read data on the page, act as the user and steal tokens available to JavaScript.

Further reading

Test yourself

Take the Browser & Web Performance · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.