Web API request with Cross-site Scripting attack

  • Thread starter Thread starter Prashant Gadekar
  • Start date Start date
P

Prashant Gadekar

Guest
I have below Web API request

{

"type": "MVC_WEB_API",
"status": "ONGOING",

"description": "testing request <script> alert('hello) </script> testing again"

}

in the request body description added script tag with alert. Can we say this is kind of vulnerability Cross-site Scripting attack? also how we can prevent such attack for web API request?


Continue reading...
 
Back
Top