Cross Site Scripting– Client Side Solution

Cross site scripting (XSS) is a common security problem of web applications where an attacker can inject scripting code into the output of the application that is then sent to a user's web browser.In the web browser, this scripting code is executed and used to transfer sensitive data to a third-party.Today's solutions attempt to prevent XSS on the server side, for example, by inspecting and modifying the data sent to and from the web application.The presented solution, on the other hand, stops XSS attacks on the browser/ client side by tracking the use of sensitive information in the JavaScript engine of the web browser.If sensitive information is about to be transferred to a third party, the user can decide if this should be allowed or not.The existing clientside solutions degrade the performance of client's system resulting in a poor web surfing experience.In this project provides a client side solution that uses a step by step approach to protect cross site scripting, without degrading much the user's web browsing experience. I.