How does XSS work?

-
Cross-site scripting works by manipulating a vulnerable web site so that it returns malicious JavaScript to users. When the malicious code executes inside a victim's browser, the attacker can fully compromise their interaction with the application.


Comments

Post a Comment

Popular posts from this blog

SQL Interview Questions

-
1) What are the usages of SQL? To execute queries against a database To retrieve data from a database To inserts records in a database To update records in a database To delete records from a database To create new databases To create new tables in a database To create views in a database 2) Does SQL support programming? No, SQL doesn't have loop or Conditional statement. It is used like commanding language to access databases. 3) What are the subsets of SQL? Data definition language (DDL) - Data definition language(DDL) allows you to CREATE, ALTER and DELETE database objects such as schema, tables, view, sequence etc. Data manipulation language (DML) - Data manipulation language makes user able to access and manipulate data. It is used to perform following operations. Insert data into database Retrieve data from the database Update data in the database Delete data from the database Data control language (DCL) - Data control...
Read more

What is difference between http and https?

-
Start with http - Start with http:// https - Start with https:// Port http - It uses 80 port by default. https - It uses 443 port by default. Protocol http - It operates on tcp/tp level. https - It operates on http but uses encrypted tls/ssl. Data encryption http - It wont use data encryption. https - It use data encryption. SEO http - it wont help in search ranking. https - it helps in search ranking. Speed http - Speed fast. https - Speed slow. Scrambling  Data scrambling is the process to obfuscate or remove sensitive data. This process is irreversible so that the original data cannot be derived from the scrambled data. http - Does not scramble data https - It scramble data before transmission and at receiver end it de-scramble date to recover original data. There for transmitted information is secured and can not be hacked. Security Level http - It is less secured as data can be vulnerable to hackers.  https - It is designe...
Read more

When we can use abstract class & interface? Why we are using abstract class & interface?

-
  When to use Abstract Class? An abstract class is a good choice if we are using the inheritance concept since it provides a common base class implementation to derived classes. An abstract class is also good if we want to declare non-public members.  In an interface, all methods must be public. If we want to add new methods in the future, then an abstract class is a better choice. Because if we add new methods to an interface, then all of the classes that already implemented that interface will have to be changed to implement the new methods. When to use interface? If the functionality we are creating will be useful across a wide range of disparate objects, use an interface. Abstract classes should be used primarily for objects that are closely related, whereas interfaces are best suited for providing a common functionality to unrelated classes. Interfaces are a good choice when we think that the API will not change for a while. Interfaces are also good when we want to have s...
Read more