Upcoming Webinar: How to Pass PCI DSS 6.4.3 & 11.6.1 (cside x BARR Advisory)

Web Security Terms

Glossary

1

1st-Party script

See definition

3

3rd-Party script

See definition

B

Browser Exploit Kits

See definition

Browser Fingerprinting

See definition

Browser Plugins and Extensions

See definition

Browser Sandboxing

See definition

C

Cache Poisoning

See definition

Clickjacking

See definition

Client-Side Security

See definition

Content Security Policy (CSP)

See definition

CORS (Cross-Origin Resource Sharing)

See definition

Cross-Site Scripting (XSS)

See definition

CSP Nonce

See definition

D

Digital Skimmers

See definition

DOM Sanitization

See definition

DOM-based XSS

See definition

Drive-by Download

See definition

F

Fingerprinting Resistance

See definition

Frame Busting

See definition

Fuzzing (Client-Side)

See definition

H

HSTS (Strict Transport Security)

See definition

HTML Injection

See definition

HttpOnly Cookies

See definition

HTTPS

See definition

I

IndexedDB

See definition

J

JavaScript Injection

See definition

JavaScript Obfuscation

See definition

L

Local Storage

See definition

M

Magecart Attacks

See definition

Man-in-the-Browser Attack (MitB)

See definition

Memory Corruption Vulnerabilities

See definition

Mixed Content

See definition

N

Network Inspector Tools

See definition

P

Polyglot Payloads

See definition

R

Redress Attacks

See definition

Reflected XSS

See definition

S

Same-Origin Policy (SOP)

See definition

Sandbox Attribute for Iframes

See definition

Secure Cookies

See definition

Secure Headers

See definition

Service Workers

See definition

Session Hijacking

See definition

Session Storage

See definition

Stored XSS

See definition

Subresource Integrity (SRI)

See definition

T

Transport Layer Security (TLS)

See definition

U

User-Agent Spoofing

See definition

W

Web Assembly (Wasm)

See definition

Web Crypto API

See definition

Web Extensions

See definition

X

X-Content-Type-Options

See definition

X-XSS-Protection

See definition