Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
Skip to next slide
You can skip to the next slide in
3
Ad
×
Your browser does not support the video tag.
Skip to next slide
Ad
×
Share Slideshare
LinkedIn
Facebook
Twitter
Embed
Size (px)
Show related Slideshows at end
WordPress Shortcode
Link
Share
Email
2024 Trend Updates: What Really Wor...
by Search Engine Jou...
1052471 views
Storytelling For The Web: Integrate...
by Chiara Aliotta
967761 views
Artificial Intelligence, Data and C...
by OECD Directorate ...
900577 views
How to Leverage AI to Boost Employe...
by SocialHRCamp
380598 views
2024 State of Marketing Report – by...
by Marius Sescu
215763 views
Everything You Need To Know About C...
by Expeed Software
233752 views
View on Slideshare
1
of
10
Ad
View on Slideshare
1
of
10
Ad
![XSS Client-Side XSS
• Client-Side XSS ( : DOM Based XSS) [1]
2[1]. IPA, “IPA DOM Based XSS ”, https://www.ipa.go.jp/files/...](https://image.slidesharecdn.com/yuji-ym-200220125556/75/Trusted-Types-Client-Side-XSS-2-2048.jpg?cb=1668156565)
![XSS
3
Client-Side XSS [2]
HTML XSS
Content Security PolicyWeb Application Firewall
[2]. Sebastian Lekies, Krzysztof Kotowi...](https://image.slidesharecdn.com/yuji-ym-200220125556/75/Trusted-Types-Client-Side-XSS-3-2048.jpg?cb=1668156565)
![Client-Side XSS
• Client-Side XSS
► [3]
► [4]
► [5]
► … etc
4
JavaScript Web
[3]. Ben Stock, Sebastian Lekies, Tobias Muel...](https://image.slidesharecdn.com/yuji-ym-200220125556/75/Trusted-Types-Client-Side-XSS-4-2048.jpg?cb=1668156565)
![Trusted Types
• [6]
► Trusted Types
5
$('div').innerHTML = '<img src=/ onerror="alert(10)">' // ERROR
const escapePolicy =...](https://image.slidesharecdn.com/yuji-ym-200220125556/75/Trusted-Types-Client-Side-XSS-5-2048.jpg?cb=1668156565)
![• JavaScript
•
►
9
Stock
[3]
Parameshwaran
[4] 1 2
Web
×
Web Web
( ) 7~17% 5% 1.2% 0.4~1.2%
0.16% - 46.2% 10.9%](https://image.slidesharecdn.com/yuji-ym-200220125556/75/Trusted-Types-Client-Side-XSS-9-2048.jpg?cb=1668156565)
