Glossary

X-Frame-Options

An HTTP response header that controls whether a page may be embedded in a frame, defending against clickjacking by preventing other sites from iframing the page.

XSS

Cross-Site Scripting: a class of vulnerability where attacker-controlled content is rendered as code by the victim's browser, enabling theft, account takeover, or other client-side attacks.

XSS Testing

Testing a web application for cross-site scripting vulnerabilities by probing inputs with crafted payloads to find where untrusted content reaches the browser as code.