Automated removal of cross site scripting vulnerabilities in web applications

• Main Authors: SHAR, Lwin Khin, TAN, Hee Beng Kuan
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2011
• Subjects: Cross site scripting; Injection vulnerability; Character escaping; Encoding; Web security; Automated bug fixing; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4897; https://ink.library.smu.edu.sg/context/sis_research/article/5900/viewcontent/Automated___PV.pdf
• Institution: Singapore Management University

Context: Cross site scripting (XSS) vulnerability is among the top web application vulnerabilities according to recent surveys. This vulnerability occurs when a web application uses inputs received from users in web pages without properly checking them. This allows an attacker to inject malicious sc...