Post

Lukas Weichselbaum

MITRE: Cross-Site Scripting Is 2024's Most Dangerous Software Weakness www.darkreading.com/application-...

darkreading.comCross-Site Scripting: 2024's Most Dangerous SoftwareIn addition to XSS, MITRE and CISA's 2024 list of the 25 most dangerous security vulnerability types (CWEs) also flagged out-of-bounds write, SQL injection, CSRF, and path traversal.

John Opdenakker

@j-opdenakker.bsky.social

I'd hope with several frameworks being secure by default when it comes to XSS that this wouldn't be the case anymore, but slow progress I guess?

Lukas Weichselbaum

Yes, this works (and imho the only approach that works at scale). See page 7 of Google's secure by design whitepaper: static.googleusercontent.com/media/public...

static.googleusercontent.comstatic.googleusercontent.com

26/11/24, 9:10 pm0 reposts1 like

No replies yet.