The origins of Cross Site Scripting

By stotti | Published: December 21, 2009

Cross Site Scripting (XSS) celebrates its 10th birthday this december. Well, it is not exactly definable when the first XSS hack popped up, but at least the term originates in mid-December of 1999. David Ross, security engineer at Microsoft, just shared this short anecdote and wrote which terms were in discussion for the thing we now know as XSS as well:

Unauthorized Site Scripting
Unofficial Site Scripting
URL Parameter Script Insertion
Cross Site Scripting
Synthesized Scripting
Fraudulent Scripting

I think i like “Fraudulent Scripting.” ;) Anyway, i absolutely agree to Davids conclusion to his post:

Let’s hope that ten years from now we’ll be celebrating the death, not the birth, of Cross-Site Scripting!

Exactly, Cross Site Scripting has to vanish. Keep your code clean, validate every input and adopt common security principles!

This entry was posted in security & privacy, world wide webtech and tagged , , , . Bookmark the permalink. Post a comment or leave a trackback: Trackback URL.

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Germany
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Germany.