A proposed approach for prevention of the cross-site scripting attacks

The Internet is becoming an increasingly desired and essential system nowadays. In many cases, internet users may have poor security against various types of web threats. Cross-site Scripting (XSS) attack is one of the most dangerous threats that face web users, due to validation of data that have been entered by user input having security vulnerabilities. In this thesis, the best-known threat XSS that has an impact on with the web pages is presented. Because of the impacts of such web threats through developing web sites and web applications, web developers should be very conscious and have sufficient knowledge about various types of web attacks and how to check or reduce their risk. Thus, this thesis includes the specifying detail about recognizing and protecting XSS threats. In addition, the main aim of this study is to supply both web developers and web users with sufficient knowledge while developing and using websites to prevent from Cross-site Scripting (XSS) threat. For this aim, a new approach is proposed for preventing XSS and a web application is developed for testing this approach. Obtained results from the thesis show that the proposed approach can be used for preventing XSS threats. Keywords: Web Application Threats, Injection Threats, Input Validation, XSS.