What is XSS (Cross-Site Scripting)? How Do Websites Prevent Malicious Code Execution?
XSS is a security issue where untrusted content sent to the browser is treated as scripts or executable markup. This article explains the differences between Reflected XSS, Stored XSS, and DOM-based XSS, and describes how websites can use output encoding, HTML sanitization, CSP, and secure cookies