Brakeman Pro - Cross-Site Scripting in Rails

In the end, a web server provides HTML for a browser to render. That HTML is composed from many sources including, potentially, an attacker. Anywhere a site accepts external input can become a vector for XSS payloads: usernames, comments, reviews, bios, search queries, etc. But not just input forms! Query parameters, headers, cookies - anything the attacker can send to the server could be a source of XSS.
Brakeman Pro - Cross-Site Scripting in Rails #ruby #rubydeveloper #rubyonrails #scripting https://rubyonrails.ba/single/brakeman-pro-cross-site-scripting-in-rails

Nezir Zahirovic

Contractor Ruby On Rails (8+ years) / MCPD .Net / C# / Asp.Net / CSS / SQL / (11 years)

related articles