Information Security

Questions tagged [self-xss]

Ask Question

Self XSS is a XSS vulnerability that only affects the one performing it, such as tricking the victim into copy pasting code into the browser console.

4 questions
Newest
Active
Bounties
0
Unanswered
Filter by
Sorted by
Tagged with
4
votes
2answers
209 views

CVSS Score for self-XSS (stored XSS)

I have a web application which is vulnerable to stored, self-XSS attack. Proper encoding is not done In the place where the data from a database (set by the same user) is added to response. However, ...
0
votes
2answers
103 views

Is eval() in JavaScript considered self-XSS?

I found eval() in the JavaScript code of a site in HackerOne. I could not find the where the function is called, so to test the vulnerability I went to console in Chrome and wrote the method and a ...
1
vote
4answers
909 views

How to prevent self-XSS?

I am creating a website which solely uses REST api for all the features and functionality, from signup and login to fetching data and populating the webpage using Mustache as template engine for ...
10
votes
2answers
4k views

Facebook's warning of self-xss

I happened to open my browser console on Facebook recently and was greeted with the following message. Stop! This is a browser feature intended for developers. If someone told you to copy and ...