Web Security · Senior · Question 23 of 75
What are XS-Leaks?
- ✓Correct answer: Side channels that let a site learn facts about a user's state on another site, such as "is logged in" or "search has results"
- 2Leaked API keys in client-side code
- 3Memory leaks caused by cross-site scripts
Explanation
Signals include timing, frame counts, error events and window lengths. Defenses are SameSite cookies, COOP, CORP and Fetch Metadata checks.