Glossary

1st-Party script

3rd-Party script

Browser Exploit Kits

Browser Fingerprinting

Browser Plugins and Extensions

Browser Sandboxing

Cache Poisoning

Clickjacking

Client-Side Security

Content Security Policy (CSP)

CORS (Cross-Origin Resource Sharing)

Cross-Site Scripting (XSS)

CSP Nonce

Digital Skimmers

DOM Sanitization

DOM-based XSS

Drive-by Download

Fingerprinting Resistance

Frame Busting

Fuzzing (Client-Side)

HSTS (Strict Transport Security)

HTML Injection

HttpOnly Cookies

HTTPS

IndexedDB

JavaScript Injection

JavaScript Obfuscation

Local Storage

Magecart Attacks

Man-in-the-Browser Attack (MitB)

Memory Corruption Vulnerabilities

Mixed Content

Network Inspector Tools

Polyglot Payloads

Redress Attacks

Reflected XSS

Same-Origin Policy (SOP)

Sandbox Attribute for Iframes

Secure Cookies

Secure Headers

Service Workers

Session Hijacking

Session Storage

Stored XSS

Subresource Integrity (SRI)

Transport Layer Security (TLS)

User-Agent Spoofing

Web Assembly (Wasm)

Web Crypto API

Web Extensions

X-Content-Type-Options

X-XSS-Protection