XSS in JSON: Old-School Attacks for Modern Applications

May 4, 2022, 3:48 p.m. | Julius Callahan

This post highlights how cross-site scripting has adapted to today’s modern web applications, specifically the API and Javascript Object Notation (JSON).

api applications application security attacks javascript json old school xss

Visit resource

More from blog.rapid7.com / Rapid7 Blog

Metasploit Weekly Wrap-Up 04/19/24 7 hours ago | blog.rapid7.com

crushftp emergent threat response exploit framework +11

Enforce and Report on PCI DSS v4 Compliance with Rapid7 2 days, 13 hours ago | blog.rapid7.com

adoption compliance council data +21

Rapid7 Insight Platform Achieves Level 2 TX-Ramp Authorization 3 days, 10 hours ago | blog.rapid7.com

authorization authorization management cloud cloud security +17

Start with threat modelling and let gamers game 1 week ago | blog.rapid7.com

availability cloud demand game +20

Metasploit Weekly Wrap-Up 04/12/24 1 week ago | blog.rapid7.com

account account takeover active directory authentication +16

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls 1 week ago | blog.rapid7.com

advisory alto april arbitrary code +25

Stories from the SOC Part 2: MSIX Installer Utilizes Telegram Bot to Execute IDAT Loader 1 week, 2 days ago | blog.rapid7.com

analysis application blog bot +17

Patch Tuesday - April 2024 1 week, 3 days ago | blog.rapid7.com

april critical cwe defender +11

Metasploit Weekly Wrap-Up 04/05/2024 2 weeks ago | blog.rapid7.com

capabilities esc exploiting family +7

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Intermediate Security Engineer, (Incident Response, Trust & Safety)

@ GitLab | Remote, US

View on infosec-jobs.com

Journeyman Cybersecurity Triage Analyst

@ Peraton | Linthicum, MD, United States

View on infosec-jobs.com

Project Manager II - Compliance

@ Critical Path Institute | Tucson, AZ, USA

View on infosec-jobs.com

Junior System Engineer (m/w/d) Cyber Security 1

@ Deutsche Telekom | Leipzig, Deutschland

View on infosec-jobs.com

View more jobs

all InfoSec news

XSS in JSON: Old-School Attacks for Modern Applications

More from blog.rapid7.com / Rapid7 Blog

Jobs in InfoSec / Cybersecurity

SOC 2 Manager, Audit and Certification

Information Security Engineers

Intermediate Security Engineer, (Incident Response, Trust & Safety)

Journeyman Cybersecurity Triage Analyst

Project Manager II - Compliance

Junior System Engineer (m/w/d) Cyber Security 1