  |
CERT Advisory CA-2000-02: Malicious HTML Tags Embedded in Client Web Requests - http://www.cert.org/advisories/CA-2000-02.html
Advisory published jointly by the CERT Coordination Center, DoD-CERT, the DoD Joint Task Force for Computer Network Defense (JTF-CND), the Federal Computer Incident Response Capability (FedCIRC), and the National Infrastructure Protection Center (NIPC). |
  |
Apache: Cross Site Scripting Info - http://httpd.apache.org/info/css-security/
How the attack affects websites hosted on the Apache webserver and Apache specific issues. |
  |
The Cross Site Scripting FAQ - http://www.cgisecurity.com/articles/xss-faq.shtml
Answers questions on identification, threats, and prevention. Provides examples and links. |
  |
perl.com: Preventing Cross-site Scripting Attacks - http://www.perl.com/pub/a/2002/02/20/css.html
Paul Lindner, author of the mod_perl cookbook, explains how to secure our sites against Cross-Site Scripting attacks using mod_perl and Apache::TaintRequest. |
  |
Cross Site Scripting Vulnerabilities - http://www.devitry.com/security.html
Security consultant David deVitry offers background information, a free CSS vulnerability detector, and a list of vulnerable sites. |