← Client-Side Attacks
LabLesson 3 of 5 · 45 min

Lab: stored in a display name

PractitionerCross-site scripting (XSS)

Stored in a display name

Get your script to run in another visitor's browser on this origin.

Open the lab →
← Lab: reflected in the search box
Sign in to track thisUnderstanding CSRF →