Web Security Terms

Glossary

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

1

1st-Party script

3

3rd-Party script

B

Browser Exploit Kits

Browser Fingerprinting

Browser Plugins and Extensions

Browser Sandboxing

C

Cache Poisoning

Clickjacking

Client-Side Security

Content Security Policy (CSP)

CORS (Cross-Origin Resource Sharing)

Cross-Site Scripting (XSS)

CSP Nonce

D

Digital Skimmers

DOM Sanitization

DOM-based XSS

Drive-by Download

F

Fingerprinting Resistance

Frame Busting

Fuzzing (Client-Side)

H

HSTS (Strict Transport Security)

HTML Injection

HttpOnly Cookies

HTTPS

I

IndexedDB

J

JavaScript Injection

JavaScript Obfuscation

L

Local Storage

M

Magecart Attacks

Man-in-the-Browser Attack (MitB)

Memory Corruption Vulnerabilities

Mixed Content

N

Network Inspector Tools

P

Polyglot Payloads

R

Redress Attacks

Reflected XSS

S

Same-Origin Policy (SOP)

Sandbox Attribute for Iframes

Secure Cookies

Secure Headers

Service Workers

Session Hijacking

Session Storage

Stored XSS

Subresource Integrity (SRI)

T

Transport Layer Security (TLS)

U

User-Agent Spoofing

W

Web Assembly (Wasm)

Web Crypto API

Web Extensions

X

X-Content-Type-Options

X-XSS-Protection