Glossary: Endpoint and Application Security

XSS (cross-site scripting)

Also written: cross-site scripting, reflected XSS

An attack in which text a user typed runs as script in another visitor's browser. Output encoding prevents it, and HttpOnly stops it stealing cookies.