John was explaining about an attack that accepts user input without validating it and uses that input in a response. what type of attack was he describing?

Respuesta :

John was explaining about an attack that accepts user input without validating it and uses that input in a response. what type of attack was he describing? XSS

What is an XSS attack?

  • A client-side code injection attack is called cross-site scripting (XSS).
  • By embedding malicious code in a genuine web page or online application, the attacker hopes to run harmful scripts in the victim's web browser.
  • When the victim accesses the website or online application that runs the malicious code, the attack really takes place.
  • The web page or web application serves as a delivery system for the malicious script to reach the user's browser.
  • Forums, message boards, and websites that permit comments are vulnerable targets that are frequently subject to cross-site scripting assaults.

To learn more about cross-site scripting (XSS),refer:

https://brainly.com/question/4931135

#SPJ4