Web Security · Junior · Question 18 of 75

What is reflected XSS?

1A script that reflects the page's styles into another tab
✓Correct answer: Input from the request, such as a search query, is echoed into the page without escaping
3An XSS attack that only works with mirrors on the server side

Explanation

The attacker sends the victim a crafted link like /search?q=<script>.... The server puts the value straight into the HTML, and the script runs.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.