32. Cross-Site Scripting (XSS) Quiz

Why is the abbreviation for Cross-Site Scripting 'XSS' instead of 'CSS'?

• Because 'XSS' is easier to remember

• Because 'CSS' is already used for Cascading Style Sheets

• Because 'XSS' sounds cooler

• Because 'CSS' is too long

What is the primary scripting language used in most XSS attacks?

• Python

• Ruby

• JavaScript

• PHP

In a non-persistent XSS attack, what is typically exploited?

• Third-party website's input fields

• User's email account

• Social media profiles

• User's browser settings

What is another name for a non-persistent XSS attack?

• Stored attack

• Reflected attack

• Indirect attack

• Direct attack

In the shopping cart example, where was the malicious script embedded?

• Product description

• User's name

• Credit card number field

• Shipping address

What makes a persistent XSS attack different from a non-persistent one?

• It is less harmful

• It uses a different scripting language

• It stores the malicious code on a third-party site

• It targets only one user

Where might an attacker post a malicious link in a persistent XSS attack?

• In a browser extension

• In a private email

• On a social media site

• In a text message

What was the main issue with the token on the Subaru website?

• It expired too quickly

• It never expired

• It was too complex

• It was not encrypted

What should you do to protect yourself from XSS attacks?

• Click on all links in emails

• Disable your browser

• Keep your browser and applications updated

• Use outdated software

What should application developers do to prevent XSS attacks?

• Allow all scripts in input fields

• Check all inputs for scripts

• Use only one type of input field

• Ignore user inputs