{"id":999,"date":"2023-04-17T08:30:16","date_gmt":"2023-04-17T08:30:16","guid":{"rendered":"https:\/\/www-dev.ubikasec.com\/en\/?p=999"},"modified":"2023-09-19T14:48:28","modified_gmt":"2023-09-19T14:48:28","slug":"how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector","status":"publish","type":"post","link":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/","title":{"rendered":"How to protect yourself from XSS attacks with UBIKA Cloud Protector?"},"content":{"rendered":"<h2>What is Cross-Site Scripting (XSS) flaw? <\/h2>\n<p>The XSS vulnerability or Cross-site Scripting is a vulnerability, which affects a web application\u2019s front-end.<br \/>\nThis vulnerability has been named for the first time in January 2000 by Microsoft and it is one of the most common web application vulnerabilities (Cross-site scripting).<br \/>\nAccording to the OWASP website, it is present on two-thirds of the web (A7:2017-Cross-Site Scripting (XSS) | OWASP).<br \/>\nIt\u2019s pretty simple to understand how it works. A hacker injects some JavaScript code on a web application\u2019s page and when this page is visited, the code gets executed in the user\u2019s browser.<\/p>\n<p>Despite its simplicity, it can be classified into three different forms.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Discover our solution and its features.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-999","post","type-post","status-publish","format-standard","hentry","category-posts"],"acf":{"headings":[{"acf_fc_layout":"base","title_category_icon":766,"title_category":"Post","title_category_color":"clr-pink","title":"How to protect yourself from <span>XSS attacks<\/span> with UBIKA Cloud Protector?","title_color":"clr-white","title_description":"","title_description_theme":"content-text-dark","title_buttons":null,"background":"bg-gradient-purple-blue-bl","padding_top":"pt-xxlarge","padding_bottom":"pb-xxlarge","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":true,"separator_bottom_color":"sep-white","opt_breadcrumb":true,"opt_breadcrumb_theme":"breadcrumb-dark"}],"background_image":null,"modules":[{"acf_fc_layout":"split","mod_eyebrow":"","mod_eyebrow_color":"clr-purple","mod_title":"<h2>What are the types of cross site scripting?<\/h2>","mod_title_color":"clr-purple","mod_title_alignment":"align-left","mod_wysiwyg":"<h3>Stored vulnerability:<\/h3>\r\n","mod_wysiwyg_theme":"content-text-light","mod_col_left":[{"acf_fc_layout":"mod_item_text","mod_item_text_el":"An explicit name because malicious content is saved in a database and it appears every time the web application\u2019s page is visited.","item_options":{"item_option_paragraph_theme":"content-text-light"}}],"mod_col_right":[{"acf_fc_layout":"mod_item_image","mod_item_image_el":1310}],"columns_theme":"col-transparent","background_image":"","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","left_valign":"force-v-align-top","right_valign":"force-v-align-top","unique_id":""},{"acf_fc_layout":"split","mod_eyebrow":"","mod_eyebrow_color":"clr-purple","mod_title":"","mod_title_color":"clr-purple","mod_title_alignment":"align-left","mod_wysiwyg":"<h3>Non persistent vulnerability<\/h3>","mod_wysiwyg_theme":"content-text-light","mod_col_left":[{"acf_fc_layout":"mod_item_image","mod_item_image_el":1312}],"mod_col_right":[{"acf_fc_layout":"mod_item_text","mod_item_text_el":"It uses the HTTP parameters (POST &amp; GET). The server sends it to the user\u2019s browser only once.","item_options":{"item_option_paragraph_theme":"content-text-light"}}],"columns_theme":"col-transparent","background_image":"","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","left_valign":"force-v-align-top","right_valign":"force-v-align-top","unique_id":""},{"acf_fc_layout":"split","mod_eyebrow":"","mod_eyebrow_color":"clr-purple","mod_title":"","mod_title_color":"clr-purple","mod_title_alignment":"align-left","mod_wysiwyg":"<h4>Document Object Model (DOM-based) attack:<\/h4>\r\n\r\n\r\n\r\n","mod_wysiwyg_theme":"content-text-light","mod_col_left":[{"acf_fc_layout":"mod_item_text","mod_item_text_el":"Unlike the other two described above, the code is not sent to a server, but executed directly by the user's browser.\r\n","item_options":{"item_option_paragraph_theme":"content-text-light"}}],"mod_col_right":[{"acf_fc_layout":"mod_item_image","mod_item_image_el":1315}],"columns_theme":"col-transparent","background_image":"","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","left_valign":"force-v-align-top","right_valign":"force-v-align-top","unique_id":""},{"acf_fc_layout":"split","mod_eyebrow":"","mod_eyebrow_color":"clr-purple","mod_title":"","mod_title_color":"clr-purple","mod_title_alignment":"align-left","mod_wysiwyg":"With stored <strong>cross-site scripting attacks<\/strong>, the server keeps the script in the database and only returns it when a user's browser visits the page, this type of attack is performed in two stages.\r\nAs a result, it is impossible for the victim to anticipate an attack before getting the page, making the <strong>stored XSS vulnerability<\/strong> probably the most dangerous of the XSS family.\r\n\r\n<strong>The reflected and DOM-based XSS<\/strong> attacks must be placed in the parameters of a request, specifically in the URL.\r\nThis means that both of these XSS attacks can be present in links and are used by hackers in emails, using a little social engineering, it is possible to get their victim to click on a URL and the malicious script will be executed.\r\n\r\n<h2>What are some examples of the impact of Cross-Site Scripting (XSS) attacks? <\/h2>\r\n\r\nAn XSS attack can have many negative consequences for the business.\r\n<ul>\r\n\t<li>Session hijacking: a hacker can redirect the victim's browser with these cookies to their own server, and then steal their identity on the vulnerable website. If the victim is an administrator, the hacker will be able to commit all sorts of mischief: data theft, visual\/textual changes to the site, changing the roles of other users, etc.<\/li>\r\n\t<li>Downloading malware: the hacker can force the victim's browser to download a malicious file (virus, Trojan horse, etc.).<\/li>\r\n\t<li>Defacing: the hacker can also modify the content of a vulnerable website and add whatever he or she wants.<\/li> (Defacement - Wikipedia (wikipedia.org)) This technique can be used to add illegal content, propaganda messages or make the site completely unusable.<\/li>\r\n<\/ul>\r\n\r\n<h2>What are some examples of the impact of Cross-Site Scripting (XSS) attacks? <\/h2> \r\n","mod_wysiwyg_theme":"content-text-light","mod_col_left":[{"acf_fc_layout":"mod_item_text","mod_item_text_el":"","item_options":{"item_option_paragraph_theme":"content-text-light"}},{"acf_fc_layout":"mod_item_image","mod_item_image_el":1318},{"acf_fc_layout":"mod_item_text","mod_item_text_el":"<h3>1. Basic use of a chat room<\/h3>\r\nLet us use the practical case of an XSS attack with a stored XSS because it\u2019s the easiest to understand but has huge implications for a web application and its users. Let us take a basic chat on a web application without particular protection. The page has a box where the message will be appended. There is a form where you can write some text.","item_options":{"item_option_paragraph_theme":"content-text-light"}},{"acf_fc_layout":"mod_item_image","mod_item_image_el":1320},{"acf_fc_layout":"mod_item_text","mod_item_text_el":"We have two users: Loris the hacker and Paul the victim.\r\nLoris' goal is to redirect Paul's browser to his web server to steal his cookies.\r\nLet's start: Paul starts the conversation and Loris replies with a simple \"Hello\".","item_options":{"item_option_paragraph_theme":"content-text-light"}},{"acf_fc_layout":"mod_item_text","mod_item_text_el":"When Paul's chat is updated, the server will send the message back, which will be inserted into the HTML code of the page.\r\n","item_options":{"item_option_paragraph_theme":"content-text-light"}}],"mod_col_right":[{"acf_fc_layout":"mod_item_image","mod_item_image_el":1319},{"acf_fc_layout":"mod_item_text","mod_item_text_el":"When he clicks the \"Post\" button, the message will be sent to the server.\r\nThe server will then store it as is in the database.","item_options":{"item_option_paragraph_theme":"content-text-light"}},{"acf_fc_layout":"mod_item_image","mod_item_image_el":1321},{"acf_fc_layout":"mod_item_text","mod_item_text_el":"Loris' message will then be displayed normally on his browser, as intended by the site.","item_options":{"item_option_paragraph_theme":"content-text-light"}},{"acf_fc_layout":"mod_item_image","mod_item_image_el":1322}],"columns_theme":"col-transparent","background_image":"","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","left_valign":"force-v-align-top","right_valign":"force-v-align-top","unique_id":""},{"acf_fc_layout":"wysiwyg","mod_wysiwyg":"<h3>2. How to detect Cross-Site Scripting vulnerabilities<\/h3>\r\nFor his next message, Loris will surround \"How are you?\" with an HTML <strong> tag with a \"style\" attribute that is supposed to display the text in red.\r\n\r\nIn the same way as for the first message, the server will store the message and then send it back to Paul.","mod_wysiwyg_theme":"content-text-light","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"photos","title":"","mod_title_color":"clr-white","mod_title_alignment":"align-left","images":[1328,1329],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"wysiwyg","mod_wysiwyg":"The \"<strong>\" tag will be considered HTML code and placed in the DOM like the other tags.\r\n\r\nThe message will be displayed in bold and red on the user's browser. \r\nThis example was used by Loris to test whether the application was vulnerable to XSS.\r\nHe can now perform an XSS injection with malicious content.\r\nThis case represents a simple example of an XSS attack but the attacker is free to imagine the technique of his choice to achieve his goal (encoding, code obfuscation, ...).","mod_wysiwyg_theme":"content-text-light","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"photos","title":"","mod_title_color":"clr-white","mod_title_alignment":"align-left","images":[1331,1333],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"wysiwyg","mod_wysiwyg":"<h3>3. What could be an example of an XSS attack?<\/h3>\r\nLoris now knows that the chat is vulnerable to stored XSS and will then decide to steal Paul's cookies in order to log into his account.\r\nThe Javascript has 2 elements that will allow him to achieve his goal:\r\n<ul>\r\n\t<li>location allowing to redirect the browser running this code to the desired web page.<\/li>\r\n\t<li>cookie containing all the user's cookies on the current site.<\/li>\r\n<\/ul>\r\n \r\nWith the above code, Loris will be able to redirect Paul's browser to his own server while sending the latter's cookies.\r\n","mod_wysiwyg_theme":"content-text-light","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"photos","title":"","mod_title_color":"clr-white","mod_title_alignment":"align-left","images":[1329],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"wysiwyg","mod_wysiwyg":"He then only needs to retrieve them to gain access to Paul's account on the chat.\r\nThis case represents a simple example of XSS injection but the attacker is free to imagine the technique of his choice to achieve his goal (encoding, code obfuscation, etc.).\r\n\r\n<h2>Owasp best practice example<\/h2>\r\nThe Open Web Application Security Project (OWASP) provides a list of rules to apply to protect your web applications:\r\n\r\n<ul>\r\n\t<li>E<strong>scape HTML, CSS and Javascript characters<\/strong> is probably the most sensible rule to apply, indeed, not checking user input in its code will lead them to contain content To implement this rule, you can use functions available in the various programming languages or use libraries designed to clean up user input.<\/li>\r\nIt should be noted that most modern frameworks such as Angular, React or Vue implement these features natively.\r\n\t<li><strong>Content Security Policy<\/strong> is a computer security standard used to prevent XSS attacks and code injections.<\/li>\r\n\r\nThus, embedding a Content-Security-Policy header in HTTP requests is also a good way to protect users' browsers as it allows them to use only the server's resources.\r\nContent Security Policies must be well configured as they can lead to other security vulnerabilities\r\nAnother interesting header is the X-XSS-Protection which automatically filters out certain XSS attacks, it is enabled by default\r\n \r\nYou can read all the OWASP recommendations on XSS vulnerabilities here: <a href=\"https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Cross_Site_Scripting_Prevention_Cheat_Sheet.html\">Cross Site Scripting Prevention - OWASP Cheat Sheet Series<\/a>\r\n\r\n<h2>How to protect yourself from XSS with UBIKA Cloud Protector<\/h2>\r\n\r\nTo protect a web application against XSS attacks, UBIKA Cloud Protector can do two things:\r\n\r\n<h3>Blacklisting is used at all protection levels:<\/h3>\r\n\r\nIf <strong>UBIKA Cloud Protector<\/strong> detects a pattern usually used to exploit an XSS flaw, the request will be immediately blocked and redirected.\r\n\r\n\r\nThe active \"Scoring List\" on the Advanced and High levels of protection:\r\nUBIKA Cloud Protector will analyse the request and increment a score according to the malicious patterns encountered.\r\nAt the end of the analysis, if the score is higher than the authorised limit, the request is blocked and redirected.\r\n \r\n\r\n","mod_wysiwyg_theme":"content-text-light","background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"photos","title":"","mod_title_color":"clr-white","mod_title_alignment":"align-left","images":[1334,1336],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","unique_id":""},{"acf_fc_layout":"buttons","button":[{"internal_link":75,"external_link":"","button_style":"cta-turquoise-white","button_label":"Request your free 14 days"}],"background":"bg-solid-white","padding_top":"pt-medium","padding_bottom":"pb-medium","decoration":"deco-none","separator_top":false,"separator_top_color":"sep-white","separator_bottom":false,"separator_bottom_color":"sep-white","button_align":"align-center","unique_id":""}],"dl_form":"","dl_form_title":"","dl_gated":false,"dl_asset":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How does UBIKA protect you from XSS attacks?<\/title>\n<meta name=\"description\" content=\"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How does UBIKA protect you from XSS attacks?\" \/>\n<meta property=\"og:description\" content=\"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/\" \/>\n<meta property=\"og:site_name\" content=\"UBIKA\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-17T08:30:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-19T14:48:28+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"How to protect yourself from XSS attacks with UBIKA Cloud Protector?\",\"datePublished\":\"2023-04-17T08:30:16+00:00\",\"dateModified\":\"2023-09-19T14:48:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/\"},\"wordCount\":124,\"articleSection\":[\"Posts\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/\",\"url\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/\",\"name\":\"How does UBIKA protect you from XSS attacks?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/#website\"},\"datePublished\":\"2023-04-17T08:30:16+00:00\",\"dateModified\":\"2023-09-19T14:48:28+00:00\",\"author\":{\"@id\":\"\"},\"description\":\"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/posts\\\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to protect yourself from XSS attacks with UBIKA Cloud Protector?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/\",\"name\":\"UBIKA\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"\",\"url\":\"https:\\\/\\\/www.ubikasec.com\\\/en\\\/author\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How does UBIKA protect you from XSS attacks?","description":"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/","og_locale":"en_US","og_type":"article","og_title":"How does UBIKA protect you from XSS attacks?","og_description":"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.","og_url":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/","og_site_name":"UBIKA","article_published_time":"2023-04-17T08:30:16+00:00","article_modified_time":"2023-09-19T14:48:28+00:00","twitter_card":"summary_large_image","twitter_misc":{"Written by":"","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/#article","isPartOf":{"@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/"},"author":{"name":"","@id":""},"headline":"How to protect yourself from XSS attacks with UBIKA Cloud Protector?","datePublished":"2023-04-17T08:30:16+00:00","dateModified":"2023-09-19T14:48:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/"},"wordCount":124,"articleSection":["Posts"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/","url":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/","name":"How does UBIKA protect you from XSS attacks?","isPartOf":{"@id":"https:\/\/www.ubikasec.com\/en\/#website"},"datePublished":"2023-04-17T08:30:16+00:00","dateModified":"2023-09-19T14:48:28+00:00","author":{"@id":""},"description":"The XSS attacksor Cross-site Scripting vulnerability is a vulnerability that affects the client side of a web application.","breadcrumb":{"@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.ubikasec.com\/en\/posts\/how-to-protect-yourself-from-xss-attacks-with-ubika-cloud-protector\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ubikasec.com\/en\/"},{"@type":"ListItem","position":2,"name":"How to protect yourself from XSS attacks with UBIKA Cloud Protector?"}]},{"@type":"WebSite","@id":"https:\/\/www.ubikasec.com\/en\/#website","url":"https:\/\/www.ubikasec.com\/en\/","name":"UBIKA","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ubikasec.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"","url":"https:\/\/www.ubikasec.com\/en\/author\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/posts\/999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/comments?post=999"}],"version-history":[{"count":19,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/posts\/999\/revisions"}],"predecessor-version":[{"id":1377,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/posts\/999\/revisions\/1377"}],"wp:attachment":[{"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/media?parent=999"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/categories?post=999"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ubikasec.com\/en\/wp-json\/wp\/v2\/tags?post=999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}