Running a XSS Attack + How to defend

When working with JavaScript, there is one especially mean attack you want to defend against: A Cross-Site Scripting attack (XSS). In this tutorial, you're going to learn how a XSS attack works (we're going to launch one!) and how you may defend.

----------

• Follow @maxedapps and @academind_real on Twitter

See you in the videos!

----------

[eliotanderson]

Thank you max for posting this, expecting more content about security.

[codbo]

The only video on youtube that was able to explain XSS well, ty

[KostasOreopoulos]

A nice addition to mitigating XSS is to use the Content-Security-Policy header which will stop any javascript from executing except that code that originates on some specific web sites.

[Thilina]

Thanks
You are a great teacher (legend in JS)

[Chim]

Max,

I certianly appreciate you posting content like this. It is extremely helpful. I was not aware of the npm sanitizeHtml package which is actually extremely helpful. This also helped me identify a couple of XSS Vulnerabilities in some software I am working on which thanks to you, I have been able to resolve.

Kudos and keep up the good work!

[samms]

Finally, You're the first one I hear that agrees with me who thinks that 3rd party packages maybe malicious!!

[Crosfake]

Thanks Max. You doing a great job! Your Angular course is legendary!

[gknt]

Like it without thinking if it is worth. Max is here!

[blueice]

Great video, if anyone's severing pages from the server with Node helmet blocks all incline code out of the box (options available to make changes).

[arbaztyagi]

Thank you max. Looking for more security topics from you 🙂

[berk]

Finally a practical explanation and solution!! Thank you

[ezzabuzaid]

Thank you, waiting for the CSRF video!

[riskitall]

Bro you’re amazing at explaining things and keep your explanations down to earth. Very good skills man 👍🏼

[davidjiang]

This is great Max, please post more contents like this!

[aissa.bouguern]

Where is the video about cookies vs localstorage ?

[tajpouria]

Thanks Max great explanation, there is not really a complete guide over such known attacks for frontend devs out there, we highly appreciate your high quality contacts

[randomtravels]

You are an inspiration to me.
Like the way you explain concepts with 💯 clarity.

[coded]

Hey, are you Maximilian Schwarzmüller? I've taken all your Udemy courses, and they are the BEST! You put a lot of passion and hard work into all your videos, keep going! :)

[SinaGilassi]

Good job and very useful as always. Could you explain more about securing back-end such as an API?

[luckerz]

I Hope you can make full course about Web Apps Security and all vulnerabilites on web apps Max... i searched it yesterday on Academind's Udemy, but found none about it..