-2

Encode them before executing the page on the user’s web browser (i.e. NoScript - Firefox plugin)

I'm reading about XSS defenses, the slide describes the quote as "proxy-based XSS defense". How can NoScript be used this defense way?

  • 1
    I'm not really happy that I need to explain the same thing again and again - please add the relevant source of any citations. Also, while you provide some information about a slide you don't really give enough context about the actual content of the slide. Insofar it is currently not really clear from your question what you are asking about and nothing is provided where to get the missing context. – Steffen Ullrich Feb 10 at 8:54
  • Sorry, the quote is from my slides, so how do i quote it? – Henok Tesfaye Feb 10 at 8:55
  • 1
    The source of the citation is mainly needed to have more context to your question. One way would be to provide the slide. If this is not possible you should at least provide the context of the slide (like being part of lecture about a topic A discussing specifically the part B). Apart from that your question does not provide sufficient context to answer it, so you need to provide also the missing context anyway apart from only giving the source of the citation. – Steffen Ullrich Feb 10 at 8:59
  • Thank you. I will definitely do it. – Henok Tesfaye Feb 10 at 9:00
  • I found your slides here: quizlet.com/106760488/chapter-7-web-security-flash-cards You stripped out all the context in the slide. The slide is saying that NoScript can encode all traffic to the client before executing. Please refer to NoScript's documentation for how it handles XSS: noscript.net/faq#qa4_2 – schroeder Feb 11 at 10:48

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.