Paper Details

Cross Site Scripting attack (XSS) is a code injection based web security threat in which a websiteor a web application can be compromised by the attacker to get access over the sensitive information. Thesekind of attacks are possible when a malicious JavaScript code is injected into the web application using aninsecure input or a malicious XSS link. These kind of attacks can be performed on any site which has no inputvalidation and has a poor security implementation over users input. The existing systems fall short for majorcode injection based attacks. These attacks are increasing day by day as the ratio of vulnerable sites are veryhigh and many a developers don’t feel the need for such Security implementations. We presented the designand implementation of a web based API which can be used to protect any website or web application againstcross site scripting (XSS) based attack using content security policy (CSP). This API is created in a portableformat so that it can be easily implemented on any web based platform and deployed quickly as possible todecrease development time to a greater extent. With the API we also developed an android basedadministrative control which will help the owner or administrator to efficiently manage security features ofhis/her website or web application.

Shikha Agarwal, Akhil Nair, Shital Gaikwad, Pallavi Chame, Swapnil Ethape, “Prevention of Cross Site Scripting (XSS) and securing web application at client side”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 4, Issue 16, pp. -, January 2017.