XSS in JSON: Attacks in Modern Applications

This post highlights how cross-site scripting has adapted to today’s modern web applications, specifically the API and Javascript Object Notation (JSON).

Cross Site Scripting (XSS)

JSON Cross-Site Scripting protection check

All About CWE-79: Cross Site Scripting - FOSSA

Web Security Geeks - The Security Blog: Attacking JSON Application : Pentesting JSON Application

Cross-Site-Scripting — Reflected (JSON), by Anshuman Pattnaik

What is a Cross-Site Scripting (XSS) attack: Definition & Examples

A lesser-known vector for XSS attacks: SVG files, by Vinicius Brasil

WSTG - Latest OWASP Foundation

JCP, Free Full-Text

10 Practical scenarios for XSS attacks

OWASP Top 10 Security Risks & Vulnerabilities 2020

A JSON injection attack XML Content Attack: XML injection is a method

Your API-Centric Web App Is Probably Not Safe Against XSS and CSRF

XSS Vulnerability Scanner