{"id":479735,"date":"2023-08-09T10:43:58","date_gmt":"2023-08-09T10:43:58","guid":{"rendered":""},"modified":"2023-09-05T11:19:27","modified_gmt":"2023-09-05T11:19:27","slug":"xss","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ir\/wiki\/xss\/","title":{"rendered":"XSS"},"content":{"rendered":"<p>Cross-Site Scripting \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627 \u0628\u0627 \u0646\u0627\u0645 XSS \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0646\u0648\u0639\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u06cc\u0627\u0641\u062a \u0645\u06cc \u0634\u0648\u062f. \u0627\u06cc\u0646 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0633\u0645\u062a \u0633\u0631\u0648\u06cc\u0633 \u06af\u06cc\u0631\u0646\u062f\u0647 \u0631\u0627 \u0628\u0647 \u0635\u0641\u062d\u0627\u062a \u0648\u0628 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0633\u0627\u06cc\u0631 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u062a\u0632\u0631\u06cc\u0642 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06a9\u0646\u062a\u0631\u0644\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u0646\u062f \u0648 \u0627\u0632 \u0637\u0631\u0641 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u0628\u062f\u0648\u0646 \u0627\u0637\u0644\u0627\u0639 \u0622\u0646\u200c\u0647\u0627 \u0627\u0642\u062f\u0627\u0645\u0627\u062a\u06cc \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f.<\/p>\n<h2>\u062a\u0627\u0631\u06cc\u062e\u0686\u0647 XSS \u0648 \u0627\u0648\u0644\u06cc\u0646 \u0630\u06a9\u0631 \u0622\u0646<\/h2>\n<p>\u0645\u0646\u0634\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u0647 \u0631\u0648\u0632\u0647\u0627\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062c\u0633\u062a\u062c\u0648 \u06a9\u0631\u062f. \u0627\u0648\u0644\u06cc\u0646 \u0646\u0627\u0645 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 XSS \u062f\u0631 \u0633\u0627\u0644 1999 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u06cc\u06a9 \u0628\u0627\u06af \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0627\u06a9\u0633\u067e\u0644\u0648\u0631\u0631 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0631\u062f \u0638\u0627\u0647\u0631 \u0634\u062f. \u0627\u0632 \u0622\u0646 \u0632\u0645\u0627\u0646\u060c \u062f\u0631\u06a9 XSS \u0627\u0641\u0632\u0627\u06cc\u0634 \u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a \u0648 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0627\u06cc\u062c \u062a\u0631\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648\u0628 \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n<h2>\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0642\u06cc\u0642 \u062f\u0631 \u0645\u0648\u0631\u062f XSS<\/h2>\n<p>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc \u0628\u0647 \u062c\u0627\u06cc \u062e\u0648\u062f \u0648\u0628 \u0633\u0627\u06cc\u062a\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u06cc\u06a9 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f. \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u06a9\u0647 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u06a9\u0627\u0641\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0634\u062f\u0647 \u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u06cc\u06a9 \u0631\u0648\u0634 \u062c\u0630\u0627\u0628 \u0628\u0631\u0627\u06cc \u0645\u062c\u0631\u0645\u0627\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u062e\u0635\u06cc\u060c \u0631\u0628\u0648\u062f\u0646 \u062c\u0644\u0633\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u060c \u06cc\u0627 \u0647\u062f\u0627\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0647 \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u06a9\u0644\u0627\u0647\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0633\u062a.<\/p>\n<h3>\u06af\u0633\u062a\u0631\u0634 \u0645\u0648\u0636\u0648\u0639 XSS<\/h3>\n<p>XSS \u0641\u0642\u0637 \u06cc\u06a9 \u062a\u0647\u062f\u06cc\u062f \u0645\u0646\u062d\u0635\u0631 \u0628\u0647 \u0641\u0631\u062f \u0646\u06cc\u0633\u062a\u060c \u0628\u0644\u06a9\u0647 \u062f\u0633\u062a\u0647 \u0627\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u0633\u062a. \u062f\u0631\u06a9 XSS \u0628\u0627 \u062a\u06a9\u0627\u0645\u0644 \u0641\u0646 \u0622\u0648\u0631\u06cc \u0647\u0627\u06cc \u0648\u0628 \u0631\u0634\u062f \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648 \u0627\u06a9\u0646\u0648\u0646 \u062a\u06a9\u0646\u06cc\u06a9 \u0647\u0627 \u0648 \u0627\u0633\u062a\u0631\u0627\u062a\u0698\u06cc \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u0631\u0627 \u062f\u0631 \u0628\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f.<\/p>\n<h2>\u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0627\u062e\u0644\u06cc XSS<\/h2>\n<p>XSS \u0628\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u06cc\u06a9 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0639\u0645\u0644 \u0645\u06cc \u06a9\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0645\u0639\u0631\u0641\u06cc \u06a9\u0646\u062f. \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0646\u062d\u0648\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f \u0622\u0646 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0644\u06cc \u0622\u0645\u062f\u0647 \u0627\u0633\u062a:<\/p>\n<ol>\n<li><strong>\u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631<\/strong>: \u0645\u0647\u0627\u062c\u0645 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0646\u0645\u06cc \u06a9\u0646\u062f \u06cc\u0627 \u0627\u0632 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0641\u0631\u0627\u0631 \u0646\u0645\u06cc \u06a9\u0646\u062f.<\/li>\n<li><strong>\u0645\u062d\u0645\u0648\u0644\u0647 \u06a9\u0627\u0631\u062f\u0633\u062a\u06cc<\/strong>: \u0645\u0647\u0627\u062c\u0645 \u06cc\u06a9 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0645\u062e\u0631\u0628 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0628\u062e\u0634\u06cc \u0627\u0632 \u06a9\u062f \u0633\u0627\u06cc\u062a \u0627\u062c\u0631\u0627 \u0634\u0648\u062f.<\/li>\n<li><strong>\u062a\u0632\u0631\u06cc\u0642<\/strong>: \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u0634\u0648\u062f\u060c \u062c\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u0635\u0641\u062d\u0647 \u0648\u0628 \u062c\u0627\u0633\u0627\u0632\u06cc \u0645\u06cc \u0634\u0648\u062f.<\/li>\n<li><strong>\u0627\u062c\u0631\u0627<\/strong>: \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0635\u0641\u062d\u0647 \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u0627\u0648 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0639\u0645\u0644 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc \u062f\u0647\u062f.<\/li>\n<\/ol>\n<h2>\u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0627\u06cc \u06a9\u0644\u06cc\u062f\u06cc XSS<\/h2>\n<ul>\n<li><strong>\u0637\u0628\u06cc\u0639\u062a \u0641\u0631\u06cc\u0628\u0646\u062f\u0647<\/strong>: \u0627\u063a\u0644\u0628 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0627\u0645\u0631\u0626\u06cc \u0627\u0633\u062a.<\/li>\n<li><strong>\u0647\u062f\u0641 \u06af\u0630\u0627\u0631\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646<\/strong>: \u0631\u0648\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f \u0646\u0647 \u0633\u0631\u0648\u0631\u0647\u0627.<\/li>\n<li><strong>\u0648\u0627\u0628\u0633\u062a\u06af\u06cc \u0628\u0647 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627<\/strong>: \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f.<\/li>\n<li><strong>\u062a\u0634\u062e\u06cc\u0635 \u0645\u0634\u06a9\u0644<\/strong>: \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u0646\u062a\u06cc \u0641\u0631\u0627\u0631 \u06a9\u0646\u062f.<\/li>\n<li><strong>\u062a\u0627\u062b\u06cc\u0631 \u0628\u0627\u0644\u0642\u0648\u0647<\/strong>: \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0646\u062c\u0631 \u0628\u0647 \u0633\u0631\u0642\u062a \u0647\u0648\u06cc\u062a\u060c \u0636\u0631\u0631 \u0645\u0627\u0644\u06cc \u06cc\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0634\u0648\u062f.<\/li>\n<\/ul>\n<h2>\u0627\u0646\u0648\u0627\u0639 XSS<\/h2>\n<p>\u062f\u0631 \u0632\u06cc\u0631 \u062c\u062f\u0648\u0644\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0627\u0646\u0648\u0627\u0639 \u0627\u0648\u0644\u06cc\u0647 \u062d\u0645\u0644\u0627\u062a XSS \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f:<\/p>\n<table>\n<thead>\n<tr>\n<th>\u062a\u0627\u06cc\u067e \u06a9\u0646\u06cc\u062f<\/th>\n<th>\u0634\u0631\u062d<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>XSS \u0630\u062e\u06cc\u0631\u0647 \u0634\u062f\u0647<\/td>\n<td>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0645\u062e\u0631\u0628 \u0628\u0647 \u0637\u0648\u0631 \u062f\u0627\u0626\u0645 \u062f\u0631 \u0633\u0631\u0648\u0631 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc \u0634\u0648\u062f.<\/td>\n<\/tr>\n<tr>\n<td>XSS \u0645\u0646\u0639\u06a9\u0633 \u0634\u062f\u0647 \u0627\u0633\u062a<\/td>\n<td>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0645\u062e\u0631\u0628 \u062f\u0631 \u06cc\u06a9 URL \u062c\u0627\u0633\u0627\u0632\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062a\u0646\u0647\u0627 \u0632\u0645\u0627\u0646\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0631\u0648\u06cc \u067e\u06cc\u0648\u0646\u062f \u06a9\u0644\u06cc\u06a9 \u0634\u0648\u062f.<\/td>\n<\/tr>\n<tr>\n<td>XSS \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 DOM<\/td>\n<td>\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0645\u062e\u0631\u0628 Document Object Model (DOM) \u0635\u0641\u062d\u0647 \u0648\u0628 \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u06cc \u06a9\u0646\u062f \u0648 \u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u0627 \u0645\u062d\u062a\u0648\u0627\u06cc \u0622\u0646 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc \u062f\u0647\u062f.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0631\u0627\u0647 \u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 XSS\u060c \u0645\u0634\u06a9\u0644\u0627\u062a \u0648 \u0631\u0627\u0647 \u062d\u0644 \u0647\u0627\u06cc \u0622\u0646\u0647\u0627<\/h2>\n<h3>\u0631\u0627\u0647 \u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647<\/h3>\n<ul>\n<li>\u062f\u0632\u062f\u06cc\u062f\u0646 \u06a9\u0648\u06a9\u06cc \u0647\u0627<\/li>\n<li>\u062d\u0645\u0644\u0627\u062a \u0641\u06cc\u0634\u06cc\u0646\u06af<\/li>\n<li>\u062a\u0648\u0632\u06cc\u0639 \u0628\u062f\u0627\u0641\u0632\u0627\u0631<\/li>\n<\/ul>\n<h3>\u0686\u0627\u0644\u0634 \u0647\u0627 \u0648 \u0645\u0633\u0627\u0626\u0644<\/h3>\n<ul>\n<li>\u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a<\/li>\n<li>\u0646\u0642\u0636 \u062d\u0631\u06cc\u0645 \u062e\u0635\u0648\u0635\u06cc<\/li>\n<li>\u067e\u06cc\u0627\u0645\u062f\u0647\u0627\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc<\/li>\n<\/ul>\n<h3>\u0631\u0627\u0647 \u062d\u0644 \u0647\u0627<\/h3>\n<ul>\n<li>\u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc<\/li>\n<li>\u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062d\u062a\u0648\u0627<\/li>\n<li>\u0645\u0645\u06cc\u0632\u06cc \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0646\u0638\u0645<\/li>\n<\/ul>\n<h2>\u0648\u06cc\u0698\u06af\u06cc \u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u0648 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0647\u0627<\/h2>\n<p>\u0645\u0642\u0627\u06cc\u0633\u0647 XSS \u0628\u0627 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0648\u0628 \u0645\u0627\u0646\u0646\u062f SQL Injection\u060c CSRF:<\/p>\n<ul>\n<li><strong>XSS<\/strong>: \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0628\u0647 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627 \u0645\u062a\u06a9\u06cc \u0627\u0633\u062a\u060c \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u062c\u0627\u0648\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a.<\/li>\n<li><strong>\u062a\u0632\u0631\u06cc\u0642 SQL<\/strong>: \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc SQL \u0646\u0627\u062f\u0631\u0633\u062a \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u062d\u0645\u0644\u0647 \u0645\u06cc \u06a9\u0646\u062f.<\/li>\n<li><strong>CSRF<\/strong>: \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0628\u062f\u0648\u0646 \u0631\u0636\u0627\u06cc\u062a \u0622\u0646\u0647\u0627 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0646\u0627\u062e\u0648\u0627\u0633\u062a\u0647 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f.<\/li>\n<\/ul>\n<h2>\u062f\u06cc\u062f\u06af\u0627\u0647 \u0647\u0627 \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc \u0647\u0627\u06cc \u0622\u06cc\u0646\u062f\u0647 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 XSS<\/h2>\n<p>\u0641\u0646\u0627\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0646\u0648\u0638\u0647\u0648\u0631\u06cc \u0645\u0627\u0646\u0646\u062f \u0647\u0648\u0634 \u0645\u0635\u0646\u0648\u0639\u06cc (AI) \u0648 \u06cc\u0627\u062f\u06af\u06cc\u0631\u06cc \u0645\u0627\u0634\u06cc\u0646\u06cc (ML) \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a XSS \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627\u06cc \u0648\u0628\u060c \u0686\u0627\u0631\u0686\u0648\u0628 \u0647\u0627 \u0648 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0628\u0631\u0627\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u0646\u06cc\u062a \u06a9\u0644\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u062f\u0631 \u062d\u0627\u0644 \u062a\u0648\u0633\u0639\u0647 \u0647\u0633\u062a\u0646\u062f.<\/p>\n<h2>\u0686\u06af\u0648\u0646\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u067e\u0631\u0648\u06a9\u0633\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f \u06cc\u0627 \u0628\u0627 XSS \u0645\u0631\u062a\u0628\u0637 \u0634\u062f<\/h2>\n<p>\u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u067e\u0631\u0648\u06a9\u0633\u06cc \u0645\u0627\u0646\u0646\u062f OneProxy \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u06cc\u06a9 \u0644\u0627\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0636\u0627\u0641\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a XSS \u0627\u0631\u0627\u0626\u0647 \u062f\u0647\u0646\u062f. \u0628\u0627 \u0646\u0638\u0627\u0631\u062a \u0648 \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9\u060c \u067e\u0631\u0648\u06a9\u0633\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0644\u06af\u0648\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9\u060c \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u062e\u0631\u0628 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0642\u0628\u0644 \u0627\u0632 \u0631\u0633\u06cc\u062f\u0646 \u0628\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0622\u0646\u0647\u0627 \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.<\/p>\n<h2>\u0644\u06cc\u0646\u06a9 \u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637\u0647<\/h2>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/xss\/\" target=\"_new\" rel=\"noopener nofollow\">\u0631\u0627\u0647\u0646\u0645\u0627\u06cc OWASP XSS<\/a><\/li>\n<li><a href=\"https:\/\/www.w3.org\/TR\/CSP\/\" target=\"_new\" rel=\"noopener nofollow\">\u062e\u0637 \u0645\u0634\u06cc \u0627\u0645\u0646\u06cc\u062a \u0645\u062d\u062a\u0648\u0627\u06cc W3C<\/a><\/li>\n<li><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Cross-site_scripting\" target=\"_new\" rel=\"noopener nofollow\">\u0634\u0628\u06a9\u0647 \u062a\u0648\u0633\u0639\u0647 \u062f\u0647\u0646\u062f\u0647 \u0645\u0648\u0632\u06cc\u0644\u0627: XSS<\/a><\/li>\n<\/ul>\n<p>\u062a\u0648\u062c\u0647: \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0631\u0627\u06cc \u0645\u0642\u0627\u0635\u062f \u0622\u0645\u0648\u0632\u0634\u06cc \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0628\u0627\u06cc\u062f \u0647\u0645\u0631\u0627\u0647 \u0628\u0627 \u0631\u0648\u0634\u200c\u0647\u0627 \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u0631\u0641\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u0627\u0632 \u0645\u062d\u0627\u0641\u0638\u062a \u0642\u0648\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 XSS \u0648 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0648\u0628 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>","protected":false},"featured_media":479736,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-479735","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Cross-Site Scripting (XSS)<\/mark>","faq_items":[{"question":"What is Cross-Site Scripting (XSS)?","answer":"<p>Cross-Site Scripting, or XSS, is a type of security vulnerability commonly found in web applications. It allows attackers to inject malicious client-side scripts into web pages viewed by other users, potentially leading to actions performed without the users' knowledge or consent.<\/p>"},{"question":"When was XSS first mentioned, and what is its history?","answer":"<p>XSS was first mentioned in 1999 when Microsoft reported a bug in Internet Explorer. Since then, it has become one of the most common web security vulnerabilities, evolving with the growth of web technologies.<\/p>"},{"question":"How does XSS work, and what is its internal structure?","answer":"<p>XSS works by manipulating a website's scripts, allowing an attacker to introduce malicious code. It generally involves identifying a vulnerability in user input handling, crafting a malicious payload, injecting it into the web page, and then executing it within the user's browser.<\/p>"},{"question":"What are the key features of XSS?","answer":"<p>The key features of XSS include its deceptive nature, targeting of users (not servers), dependence on browsers, difficulty in detection, and potential impact such as identity theft or financial loss.<\/p>"},{"question":"What types of XSS exist, and how do they differ?","answer":"<p>Three primary types of XSS attacks are Stored XSS, Reflected XSS, and DOM-based XSS. Stored XSS is permanently stored on the target server; Reflected XSS is embedded in a URL and runs when the link is clicked; DOM-based XSS manipulates the web page's structure or content.<\/p>"},{"question":"What are the ways to use XSS, and what problems and solutions are related to it?","answer":"<p>XSS can be used for stealing cookies, phishing, or distributing malware. Problems include data theft, privacy violation, and legal consequences. Solutions encompass input validation, implementing content security policies, and conducting regular security audits.<\/p>"},{"question":"How does XSS compare to other similar web vulnerabilities?","answer":"<p>XSS primarily attacks users through scripts, typically JavaScript. In contrast, SQL Injection attacks databases using malformed SQL queries, while CSRF tricks users into performing unwanted actions without consent.<\/p>"},{"question":"What are the future perspectives and technologies related to XSS?","answer":"<p>Future perspectives include the application of AI and ML to detect and prevent XSS attacks, and the development of new web standards, frameworks, and protocols to enhance overall security.<\/p>"},{"question":"How can proxy servers like OneProxy be associated with XSS?","answer":"<p>Proxy servers like OneProxy can provide an additional layer of security against XSS by monitoring and filtering traffic, identifying suspicious patterns or potentially malicious scripts, and blocking them before reaching the user's browser.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki\/479735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/wiki\/479735\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/media\/479736"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ir\/wp-json\/wp\/v2\/media?parent=479735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}