Glossary: Endpoint, Application and Email Security

XSS (cross-site scripting)

Also written: cross-site scripting

An attack where script code entered as input runs in other visitors' browsers, for example to send document.cookie to the attacker. Output encoding is the main fix, and HttpOnly cookies limit the damage.