{"id":3810,"date":"2020-10-14T11:25:00","date_gmt":"2020-10-14T11:25:00","guid":{"rendered":"http:\/\/the-codest.localhost\/blog\/web-app-security-xss-vulnerability\/"},"modified":"2026-04-27T10:24:05","modified_gmt":"2026-04-27T10:24:05","slug":"%d8%ab%d8%ba%d8%b1%d8%a9-%d8%a3%d9%85%d9%86%d9%8a%d8%a9-%d9%81%d9%8a-%d8%aa%d8%b7%d8%a8%d9%8a%d9%82-%d8%a7%d9%84%d9%88%d9%8a%d8%a8-xss","status":"publish","type":"post","link":"https:\/\/thecodest.co\/ar\/blog\/web-app-security-xss-vulnerability\/","title":{"rendered":"\u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0648\u064a\u0628 - \u062b\u063a\u0631\u0629 XSS"},"content":{"rendered":"<h2 class=\"wp-block-heading\">\u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0627\u0644\u0647\u062c\u0648\u0645<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062d\u062f\u064a\u062f \u0645\u0648\u0642\u0639 \u062b\u063a\u0631\u0629 XSS \u0639\u0644\u0649 \u0645\u0648\u0642\u0639 \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u062a\u0633\u062a\u062e\u062f\u0645\u0647 \u0627\u0644\u0636\u062d\u064a\u0629\u060c \u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0645\u0648\u0642\u0639 \u0623\u062d\u062f \u0627\u0644\u0628\u0646\u0648\u0643<\/li>\n\n\n\n<li>\u062a\u0645 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 \u0627\u0644\u0636\u062d\u064a\u0629 \u062d\u0627\u0644\u064a\u0627\u064b \u0625\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062d\u0629<\/li>\n\n\n\n<li>\u064a\u0631\u0633\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0644\u0649 \u0627\u0644\u0636\u062d\u064a\u0629 \u0639\u0646\u0648\u0627\u0646 URL \u0645\u0635\u0645\u0645 \u062e\u0635\u064a\u0635\u0627\u064b \u0644\u0647<\/li>\n\n\n\n<li>\u062a\u0646\u0642\u0631 \u0627\u0644\u0636\u062d\u064a\u0629 \u0639\u0644\u0649 \u0639\u0646\u0648\u0627\u0646 URL<\/li>\n\n\n\n<li>\u0639\u0644\u0649 \u0627\u0644\u0636\u062d\u064a\u0629 <a href=\"https:\/\/thecodest.co\/ar\/dictionary\/how-fintech-helps-banks\/\">\u0627\u0644\u0628\u0646\u0643<\/a> \u0627\u0644\u0645\u0648\u0642\u0639 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a, <a href=\"https:\/\/thecodest.co\/ar\/blog\/hire-javascript-developer\/\">JavaScript<\/a> <a href=\"https:\/\/thecodest.co\/ar\/dictionary\/what-is-code-refactoring\/\">\u0627\u0644\u0643\u0648\u062f<\/a> \u064a\u0628\u062f\u0623 \u0641\u064a \u0627\u0644\u062a\u0646\u0641\u064a\u0630 \u0644\u0627\u0639\u062a\u0631\u0627\u0636 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 <a href=\"https:\/\/thecodest.co\/ar\/blog\/app-data-collection-security-risks-value-and-types-explored\/\">\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a<\/a> \u0623\u0648 \u062a\u0646\u0641\u064a\u0630 \u062a\u062d\u0648\u064a\u0644 \u0628\u0627\u0644\u0646\u064a\u0627\u0628\u0629 \u0639\u0646\u0647 \u0625\u0644\u0649 \u062d\u0633\u0627\u0628 \u0627\u0644\u0645\u0639\u062a\u062f\u064a<\/li>\n<\/ol>\n\n\n\n<p>\u062a\u062c\u062f\u0631 \u0627\u0644\u0625\u0634\u0627\u0631\u0629 \u0625\u0644\u0649 \u0623\u0646 \u0627\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0625\u062c\u0631\u0627\u0624\u0647\u0627 \u0646\u064a\u0627\u0628\u0629 \u0639\u0646 \u0627\u0644\u0636\u062d\u064a\u0629 \u0642\u062f \u062a\u0643\u0648\u0646 \u063a\u064a\u0631 \u0645\u0631\u0626\u064a\u0629 \u0644\u0644\u0636\u062d\u064a\u0629\u060c \u062d\u064a\u062b \u0625\u0646\u0647\u0627 \u0642\u062f \u062a\u062a\u0645 \u0641\u064a \u0627\u0644\u062e\u0644\u0641\u064a\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 <a href=\"https:\/\/thecodest.co\/ar\/blog\/compare-staff-augmentation-firms-that-excel-in-api-team-staffing-for-financial-technology-projects\/\">\u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a<\/a>, \u060c \u0623\u0648 \u0642\u062f \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0646\u0641\u064a\u0630\u0647\u0627 \u0644\u0627\u062d\u0642\u064b\u0627 \u0628\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0644\u0627\u0632\u0645\u0629 \u0644\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u0631\u0645\u0648\u0632 \u0648\u0645\u0644\u0641\u0627\u062a \u062a\u0639\u0631\u064a\u0641 \u0627\u0644\u0627\u0631\u062a\u0628\u0627\u0637 \u0648\u0645\u0627 \u0625\u0644\u0649 \u0630\u0644\u0643.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0623\u0646\u0648\u0627\u0639 XSS<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. \u0627\u0646\u0639\u0643\u0627\u0633 XSS <\/h3>\n\n\n\n<p>\u0647\u0630\u0627 \u0648\u0627\u062d\u062f \u062d\u064a\u062b \u064a\u062a\u0645 \u0639\u0631\u0636 \u0643\u0648\u062f HTML\/JavaScript \u0627\u0644\u0645\u0648\u062c\u0648\u062f \u0641\u064a \u0623\u064a \u0645\u0639\u0644\u0645\u0629 (\u0645\u062b\u0644 GET \u0623\u0648 POST \u0623\u0648 \u0645\u0644\u0641 \u062a\u0639\u0631\u064a\u0641 \u0627\u0644\u0627\u0631\u062a\u0628\u0627\u0637) \u0641\u064a \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629.<\/p>\n\n\n\n<p>\u0635\u0641\u062d\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u062f\u062e\u0644 \u0646\u0635\u064a \u0644\u0644\u0628\u062d\u062b \u0639\u0646 \u0634\u064a\u0621 \u0645\u0627 \u064a\u0636\u0639 \u0627\u0644\u0645\u0639\u0644\u0645\u0629 <code>\u0628\u062d\u062b = \u0641\u0648<\/code> \u0641\u064a \u0646\u0647\u0627\u064a\u0629 \u0639\u0646\u0648\u0627\u0646 URL \u0639\u0646\u062f \u0627\u0644\u0627\u0633\u062a\u0639\u0644\u0627\u0645 \u0639\u0646 \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a. \u0628\u0639\u062f \u0625\u062f\u062e\u0627\u0644 \u0623\u064a \u0639\u0628\u0627\u0631\u0629\u060c \u0625\u0630\u0627 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u064a\u0647\u0627\u060c \u064a\u062a\u0645 \u0648\u0636\u0639 \u0631\u0633\u0627\u0644\u0629 \u0625\u0631\u062c\u0627\u0639 \u0641\u064a HTML ex.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"markup\" class=\"language-markup\">&lt;div&gt;\u0644\u0645 \u064a\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u0646\u062a\u064a\u062c\u0629 &lt;b&gt;\u0641\u0648&lt;\/b&gt;&lt;\/div&gt;<\/code><\/pre>\n\n\n\n<p>\u064a\u0645\u0643\u0646\u0646\u0627 \u0645\u062d\u0627\u0648\u0644\u0629 \u0648\u0636\u0639 \u0639\u0646\u0648\u0627\u0646 URL <code>\u0628\u062d\u062b=<\/code>..<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.DOM XSS <\/h3>\n\n\n\n<p>\u0647\u0630\u0627 \u0639\u0646\u062f\u0645\u0627 \u064a\u062a\u0645 \u062a\u0645\u0643\u064a\u0646 \u062a\u0646\u0641\u064a\u0630\u0647\u0627 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0648\u0638\u0627\u0626\u0641 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a JavaScript\u060c \u0645\u062b\u0644 <code>''\u0625\u064a\u0641\u0627\u0644''<\/code> \u0623\u0648 <code>'\u062f\u0627\u062e\u0644\u064a \u0647\u062a\u0644'<\/code>. \u064a\u064f\u0638\u0647\u0631 \"\u0627\u0644\u0645\u062b\u0627\u0644 \u0627\u0644\u062d\u064a\" \u0623\u062f\u0646\u0627\u0647 \u0647\u062c\u0648\u0645 DOM XSS \u064a\u0633\u062a\u0646\u062f \u0625\u0644\u0649 <code>'\u062f\u0627\u062e\u0644\u064a \u0647\u062a\u0644'<\/code> \u0627\u0644\u0648\u0638\u064a\u0641\u0629.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. XSS \u0627\u0644\u0645\u062e\u0632\u0646\u0629 <\/h3>\n\n\n\n<p>\u0647\u0630\u0627 \u0648\u0627\u062d\u062f \u062d\u064a\u062b \u062a\u062a\u0645 \u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0649 \u062c\u0627\u0646\u0628 \u0627\u0644\u062e\u0627\u062f\u0645. \u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0642\u062f \u0646\u0631\u0633\u0644 \u062a\u0639\u0644\u064a\u0642\u064b\u0627 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0625\u0644\u0649 \u0645\u0646\u0634\u0648\u0631 \u0645\u062f\u0648\u0646\u0629 \u064a\u062a\u0645 \u062a\u062d\u0645\u064a\u0644\u0647 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645. \u062a\u062a\u0645\u062b\u0644 \u0645\u0647\u0645\u062a\u0647\u0627\u060c \u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0641\u064a \u0627\u0646\u062a\u0638\u0627\u0631 \u0625\u0634\u0631\u0627\u0641 \u0627\u0644\u0645\u0633\u0624\u0648\u0644 \u062b\u0645 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u062c\u0644\u0633\u062a\u0647 \u0648\u0645\u0627 \u0625\u0644\u0649 \u0630\u0644\u0643.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0637\u0631\u0642 \u0627\u0644\u062d\u0642\u0646<\/h2>\n\n\n\n<p>1. \u0641\u064a \u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0639\u0644\u0627\u0645\u0629<\/p>\n\n\n\n<p><code>'\u0639\u0644\u0649 \u062e\u0637\u0623=\u062a\u0646\u0628\u064a\u0647('XSS')''<\/code>\u0641\u064a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">&lt;img src onerror=&quot;alert(&#039;XSS&#039;)&quot; \/&gt;<\/code><\/pre>\n\n\n\n<p>2. \u0641\u064a \u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0633\u0645\u0629<\/p>\n\n\n\n<p><code>\"\" onmouseover=\u062a\u0646\u0628\u064a\u0647('XSS')<\/code> \u0641\u064a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">&lt;div class=&quot;&quot; onmouseover=&quot;alert(&#039;XSS&#039;)&quot;&quot;&gt;&lt;\/div&gt;<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"3\">\n<li>\u0641\u064a \u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0633\u0645\u0629 \u0628\u062f\u0648\u0646 \u0639\u0644\u0627\u0645\u0627\u062a \u0627\u0644\u0627\u0642\u062a\u0628\u0627\u0633<\/li>\n<\/ol>\n\n\n\n<p><code>x onclick=\u062a\u0646\u0628\u064a\u0647('XSS')<\/code>\u0641\u064a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">&lt;div class=&quot;x&quot; onclick=&quot;alert(&#039;XSS&#039;)&quot;&gt;&lt;\/div&gt;<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"4\">\n<li>\u0641\u064a <code>\u0627\u0644\u062a\u0643\u0631\u064a\u0645<\/code>\u0633\u0645\u0629 ef<\/li>\n<\/ol>\n\n\n\n<p><code>\u062c\u0627\u0641\u0627 \u0633\u0643\u0631\u064a\u0628\u062a:\u062a\u0646\u0628\u064a\u0647('XSS')<\/code> \u0641\u064a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"javascript\" class=\"language-javascript\">&lt;a href=&quot;javascript:alert(&#039;XSS&#039;)&quot;&gt;&lt;\/a&gt;<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"5\">\n<li>\u0641\u064a \u0627\u0644\u0633\u0644\u0633\u0644\u0629 \u062f\u0627\u062e\u0644 \u0643\u0648\u062f JavaScript<\/li>\n<\/ol>\n\n\n\n<p><code>\"\u061b\u062a\u0646\u0628\u064a\u0647('XSS')\/\/<\/code> \u0641\u064a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">\u062f\u0639 \u0627\u0633\u0645 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645=\"\"\u061b \u062a\u0646\u0628\u064a\u0647('XSS')\"\u061b<\/code><\/pre>\n\n\n\n<ol class=\"wp-block-list\" start=\"6\">\n<li>\u0641\u064a \u0627\u0644\u0633\u0645\u0629 \u0645\u0639 \u062d\u062f\u062b JavaScript<\/li>\n<\/ol>\n\n\n\n<p><code>&#039;)\u061b)\u061b\u062a\u0646\u0628\u064a\u0647('XSS')\/\/<\/code> \u062d\u064a\u062b <code>&amp;#39<\/code> \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0627\u0642\u062a\u0628\u0627\u0633 \u0648\u0627\u062d\u062f\u060c \u0625\u0644\u0649<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"markup\" class=\"language-markup\">&lt;div onclick=&quot;change(&#039;&amp;#39;);alert(&#039;XSS&#039;)\/\/&#039;)&quot;&gt;\u062c\u0648\u0646&lt;\/div&gt;<\/code><\/pre>\n\n\n\n<p><\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"7\">\n<li>\u0641\u064a <code>\u0627\u0644\u062a\u0643\u0631\u064a\u0645<\/code> \u0633\u0645\u0629 \u062f\u0627\u062e\u0644 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 JavaScript<\/li>\n<\/ol>\n\n\n\n<p><code>)\u061b\u062a\u0646\u0628\u064a\u0647(1)\/\/<\/code> \u062d\u064a\u062b <code>%27<\/code> \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0627\u0642\u062a\u0628\u0627\u0633 \u0648\u0627\u062d\u062f\u060c \u0625\u0644\u0649<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"javascript\" class=\"language-javascript\">&lt;a href=&quot;javascript:change(&#039;%27);alert(1)\/\/&#039;)&quot;&gt;\u0627\u0646\u0642\u0631 \u0641\u0648\u0642&lt;\/a&gt;<\/code><\/pre>\n\n\n\n<p><code><br> <\/code><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u062b\u0627\u0644 \u062d\u064a<\/h3>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-codesandbox wp-block-embed-codesandbox\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" title=\"\u062b\u063a\u0631\u0629 XSS\" width=\"500\" height=\"750\" src=\"https:\/\/codesandbox.io\/embed\/xss-vulnerability-iedok#?secret=JCHK6BCh6d\" data-secret=\"JCHK6BCh6d\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u0623\u0633\u0627\u0644\u064a\u0628 \u0627\u0644\u062f\u0641\u0627\u0639<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u062a\u0631\u0645\u064a\u0632 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062f\u0648\u0627\u0644 \u0627\u0644\u0645\u062f\u0645\u062c\u0629 \u0627\u0644\u0645\u0648\u062c\u0648\u062f\u0629 \u0641\u064a \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 <a href=\"https:\/\/thecodest.co\/ar\/blog\/top-programming-languages-to-build-e-commerce\/\">\u0644\u063a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u0629<\/a>.<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0642\u0648\u0627\u0644\u0628 \u0630\u0627\u062a \u0627\u0644\u062a\u0631\u0645\u064a\u0632 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a. \u0645\u0639\u0638\u0645 \u0627\u0644\u0623\u0637\u0631 \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u062a\u062d\u0645\u064a <a href=\"https:\/\/thecodest.co\/ar\/blog\/why-us-companies-are-opting-for-polish-developers\/\">\u0644\u0646\u0627<\/a> \u0645\u0646 \u062d\u0642\u0646 XSS (<a href=\"https:\/\/thecodest.co\/ar\/blog\/hire-django-developers\/\">\u062c\u0627\u0646\u063a\u0648<\/a>\u060c \u0627\u0644\u0642\u0648\u0627\u0644\u0628, <a href=\"https:\/\/thecodest.co\/ar\/blog\/hire-vue-js-developers\/\">Vue<\/a>, <a href=\"https:\/\/thecodest.co\/ar\/blog\/conditional-component-visibility-in-react\/\">React<\/a> \u0625\u0644\u062e).<\/li>\n\n\n\n<li>\u0644\u0627 \u062a\u0633\u062a\u062e\u062f\u0645 \u062f\u0648\u0627\u0644 \u0645\u062b\u0644 <code>\u0627\u0644\u062a\u0642\u064a\u064a\u0645<\/code> \u0623\u0648 <code>\u0627\u0644\u0648\u0638\u064a\u0641\u0629<\/code> \u0628\u0628\u064a\u0627\u0646\u0627\u062a \u0645\u0633\u062a\u062e\u062f\u0645 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642 \u0628\u0647\u0627.<\/li>\n\n\n\n<li>\u0644\u0627 \u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062f\u0648\u0627\u0644 \u0648\u0627\u0644\u062e\u0635\u0627\u0626\u0635 \u0627\u0644\u062a\u064a \u062a\u0639\u064a\u0651\u0646 \u0634\u064a\u0641\u0631\u0629 HTML \u0645\u0628\u0627\u0634\u0631\u0629\u064b \u0625\u0644\u0649 \u0639\u0646\u0627\u0635\u0631 \u0634\u062c\u0631\u0629 DOM\u060c \u0645\u062b\u0644\u064b\u0627, <code>\u062f\u0627\u062e\u0644\u064aHTML<\/code>, <code>outerHTML<\/code>, <code>\u0625\u062f\u0631\u0627\u062cAdjacentHTML<\/code>, <code>ocument.write<\/code>. \u0628\u062f\u0644\u064b\u0627 \u0645\u0646 \u0630\u0644\u0643\u060c \u064a\u0645\u0643\u0646\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062f\u0648\u0627\u0644 \u0627\u0644\u062a\u064a \u062a\u0639\u064a\u0646 \u0627\u0644\u0646\u0635 \u0645\u0628\u0627\u0634\u0631\u0629\u064b \u0625\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u0639\u0646\u0627\u0635\u0631\u060c \u0645\u062b\u0644 <code>\u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0646\u0635<\/code> \u0623\u0648 <code>\u0627\u0644\u0646\u0635 \u0627\u0644\u062f\u0627\u062e\u0644\u064a<\/code>.<\/li>\n\n\n\n<li>\u062a\u0648\u062e\u064e\u0651 \u0627\u0644\u062d\u0630\u0631 \u0639\u0646\u062f \u0625\u0639\u0627\u062f\u0629 \u062a\u0648\u062c\u064a\u0647 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0625\u0644\u0649 \u0639\u0646\u0648\u0627\u0646 URL \u062e\u0627\u0636\u0639 \u0644\u0633\u064a\u0637\u0631\u062a\u0647. \u062e\u0637\u0631 \u0627\u0644\u062d\u0642\u0646 <code>\u0627\u0644\u0645\u0648\u0642\u0639 = '\u062c\u0627\u0641\u0627 \u0633\u0643\u0631\u064a\u0628\u062a('XSS')''<\/code>.<\/li>\n\n\n\n<li>\u062a\u0635\u0641\u064a\u0629 HTML \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0643\u062a\u0628\u0627\u062a \u0645\u062b\u0644 <code>DOMPurify<\/code>.<\/li>\n\n\n\n<li>\u0643\u0646 \u062d\u0630\u0631\u0627\u064b \u0628\u0634\u0623\u0646 \u0627\u0644\u062a\u062d\u0645\u064a\u0644 <code>.html<\/code> \u0623\u0648 <code>.svg<\/code> \u0627\u0644\u0645\u0644\u0641\u0627\u062a. \u064a\u0645\u0643\u0646\u0643 \u0625\u0646\u0634\u0627\u0621 \u0645\u062c\u0627\u0644 \u0645\u0646\u0641\u0635\u0644 \u064a\u062a\u0645 \u0645\u0646 \u062e\u0644\u0627\u0644\u0647 \u0639\u0631\u0636 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u062d\u0645\u064a\u0644\u0647\u0627.<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u062e\u062f\u0645 <code>\u0633\u064a\u0627\u0633\u0629 \u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u062d\u062a\u0648\u0649-\u0627\u0644\u0623\u0645\u0646-\u0627\u0644\u0645\u062d\u062a\u0648\u0649<\/code> \u0627\u0644\u0622\u0644\u064a\u0629.<\/li>\n\n\n\n<li> <span style=\"font-size: revert; color: initial; font-family: -apple-system, BlinkMacSystemFont, &quot;Segoe UI&quot;, Roboto, Oxygen-Sans, Ubuntu, Cantarell, &quot;Helvetica Neue&quot;, sans-serif;\">\u0623\u0644\u0642 \u0646\u0638\u0631\u0629 \u0639\u0644\u0649 \u0641\u0644\u0627\u062a\u0631 \u0645\u0643\u0627\u0641\u062d\u0629 XSS \u0627\u0644\u0645\u062f\u0645\u062c\u0629 \u0641\u064a \u0645\u0639\u0638\u0645 \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629.<\/span> <p><strong>\u0625\u0630\u0627 \u0648\u062c\u062f\u062a \u0647\u0630\u0647 \u0627\u0644\u0645\u0642\u0627\u0644\u0629 \u0645\u062b\u064a\u0631\u0629 \u0644\u0644\u0627\u0647\u062a\u0645\u0627\u0645\u060c \u062a\u0627\u0628\u0639 \u0644\u0648\u0643\u0627\u0634 \u0639\u0644\u0649 Github:<\/strong> https:\/\/github.com\/twistezo<\/p> <\/li>\n<\/ol>\n\n\n\n<p><strong>\u0627\u0642\u0631\u0623 \u0627\u0644\u0645\u0632\u064a\u062f:<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/thecodest.co\/blog\/data-fetching-strategies-in-nextjs\/\">\u0627\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0627\u062a \u062c\u0644\u0628 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a NextJS<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/thecodest.co\/blog\/rails-api-cors-dash-of-consciousness\/\">\u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0642\u0636\u0628\u0627\u0646 \u0648 CORS. \u0627\u0646\u062f\u0641\u0627\u0639\u0629 \u0645\u0646 \u0627\u0644\u0648\u0639\u064a<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/thecodest.co\/blog\/why-you-should-probably-use-typescript\/\">\u0644\u0645\u0627\u0630\u0627 \u064a\u062c\u0628 \u0639\u0644\u064a\u0643 (\u0639\u0644\u0649 \u0627\u0644\u0623\u0631\u062c\u062d) \u0627\u0633\u062a\u062e\u062f\u0627\u0645 Typescript\u061f<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>\u062a\u064f\u0645\u0643\u0651\u0646 \u0647\u062c\u0645\u0627\u062a XSS \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0645\u0646 \u062d\u0642\u0646 \u0646\u0635\u0648\u0635 \u0628\u0631\u0645\u062c\u064a\u0629 \u0645\u0646 \u062c\u0627\u0646\u0628 \u0627\u0644\u0639\u0645\u064a\u0644 \u0641\u064a \u0635\u0641\u062d\u0627\u062a \u0627\u0644\u0648\u064a\u0628 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0639\u0631\u0636\u0647\u0627 \u0645\u0646 \u0642\u0628\u0644 \u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0622\u062e\u0631\u064a\u0646. \u062a\u062a\u0645\u062b\u0644 \u0627\u0644\u0622\u062b\u0627\u0631 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0641\u064a \u0633\u064a\u0627\u0642 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0630\u064a \u0642\u0627\u0645 \u0628\u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644\u060c \u0648\u0642\u0631\u0627\u0621\u0629 \u0623\u064a \u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0633\u064a\u0627\u0642 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0630\u064a \u0642\u0627\u0645 \u0628\u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644.<\/p>","protected":false},"author":2,"featured_media":3809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[8],"tags":[],"class_list":["post-3810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software-development"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Web app security - XSS vulnerability - The Codest<\/title>\n<meta name=\"description\" content=\"Enhance your knowledge of web app security. Discover how XSS attacks can affect bank transactions and user safety.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thecodest.co\/ar\/\u0627\u0644\u0645\u062f\u0648\u0646\u0629\/\u062b\u063a\u0631\u0629-\u0623\u0645\u0646\u064a\u0629-\u0641\u064a-\u062a\u0637\u0628\u064a\u0642-\u0627\u0644\u0648\u064a\u0628-xss\/\" \/>\n<meta property=\"og:locale\" content=\"ar_AR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Web app security - XSS vulnerability\" \/>\n<meta property=\"og:description\" content=\"Enhance your knowledge of web app security. Discover how XSS attacks can affect bank transactions and user safety.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thecodest.co\/ar\/\u0627\u0644\u0645\u062f\u0648\u0646\u0629\/\u062b\u063a\u0631\u0629-\u0623\u0645\u0646\u064a\u0629-\u0641\u064a-\u062a\u0637\u0628\u064a\u0642-\u0627\u0644\u0648\u064a\u0628-xss\/\" \/>\n<meta property=\"og:site_name\" content=\"The Codest\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-14T11:25:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-27T10:24:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"thecodest\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"thecodest\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u062f\u0642\u0627\u0626\u0642\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/\"},\"author\":{\"name\":\"thecodest\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/#\\\/schema\\\/person\\\/7e3fe41dfa4f4e41a7baad4c6e0d4f76\"},\"headline\":\"Web app security &#8211; XSS vulnerability\",\"datePublished\":\"2020-10-14T11:25:00+00:00\",\"dateModified\":\"2026-04-27T10:24:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/\"},\"wordCount\":528,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/05\\\/web-app-security.png\",\"articleSection\":[\"Software Development\"],\"inLanguage\":\"ar\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/\",\"url\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/\",\"name\":\"Web app security - XSS vulnerability - The Codest\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/05\\\/web-app-security.png\",\"datePublished\":\"2020-10-14T11:25:00+00:00\",\"dateModified\":\"2026-04-27T10:24:05+00:00\",\"description\":\"Enhance your knowledge of web app security. Discover how XSS attacks can affect bank transactions and user safety.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#breadcrumb\"},\"inLanguage\":\"ar\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ar\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/05\\\/web-app-security.png\",\"contentUrl\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/05\\\/web-app-security.png\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/blog\\\/web-app-security-xss-vulnerability\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thecodest.co\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Web app security &#8211; XSS vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/#website\",\"url\":\"https:\\\/\\\/thecodest.co\\\/\",\"name\":\"The Codest\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thecodest.co\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ar\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/#organization\",\"name\":\"The Codest\",\"url\":\"https:\\\/\\\/thecodest.co\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ar\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/03\\\/thecodest-logo.svg\",\"contentUrl\":\"https:\\\/\\\/thecodest.co\\\/app\\\/uploads\\\/2024\\\/03\\\/thecodest-logo.svg\",\"width\":144,\"height\":36,\"caption\":\"The Codest\"},\"image\":{\"@id\":\"https:\\\/\\\/thecodest.co\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/pl.linkedin.com\\\/company\\\/codest\",\"https:\\\/\\\/clutch.co\\\/profile\\\/codest\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thecodest.co\\\/#\\\/schema\\\/person\\\/7e3fe41dfa4f4e41a7baad4c6e0d4f76\",\"name\":\"thecodest\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ar\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g\",\"caption\":\"thecodest\"},\"url\":\"https:\\\/\\\/thecodest.co\\\/ar\\\/author\\\/thecodest\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0648\u064a\u0628 - \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a XSS - The Codest","description":"\u0639\u0632\u0632 \u0645\u0639\u0631\u0641\u062a\u0643 \u0628\u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628. \u0627\u0643\u062a\u0634\u0641 \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062b\u0631 \u0647\u062c\u0645\u0627\u062a XSS \u0639\u0644\u0649 \u0627\u0644\u0645\u0639\u0627\u0645\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0631\u0641\u064a\u0629 \u0648\u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thecodest.co\/ar\/\u0627\u0644\u0645\u062f\u0648\u0646\u0629\/\u062b\u063a\u0631\u0629-\u0623\u0645\u0646\u064a\u0629-\u0641\u064a-\u062a\u0637\u0628\u064a\u0642-\u0627\u0644\u0648\u064a\u0628-xss\/","og_locale":"ar_AR","og_type":"article","og_title":"Web app security - XSS vulnerability","og_description":"Enhance your knowledge of web app security. Discover how XSS attacks can affect bank transactions and user safety.","og_url":"https:\/\/thecodest.co\/ar\/\u0627\u0644\u0645\u062f\u0648\u0646\u0629\/\u062b\u063a\u0631\u0629-\u0623\u0645\u0646\u064a\u0629-\u0641\u064a-\u062a\u0637\u0628\u064a\u0642-\u0627\u0644\u0648\u064a\u0628-xss\/","og_site_name":"The Codest","article_published_time":"2020-10-14T11:25:00+00:00","article_modified_time":"2026-04-27T10:24:05+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png","type":"image\/png"}],"author":"thecodest","twitter_card":"summary_large_image","twitter_misc":{"Written by":"thecodest","Est. reading time":"3 \u062f\u0642\u0627\u0626\u0642"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#article","isPartOf":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/"},"author":{"name":"thecodest","@id":"https:\/\/thecodest.co\/#\/schema\/person\/7e3fe41dfa4f4e41a7baad4c6e0d4f76"},"headline":"Web app security &#8211; XSS vulnerability","datePublished":"2020-10-14T11:25:00+00:00","dateModified":"2026-04-27T10:24:05+00:00","mainEntityOfPage":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/"},"wordCount":528,"commentCount":0,"publisher":{"@id":"https:\/\/thecodest.co\/#organization"},"image":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png","articleSection":["Software Development"],"inLanguage":"ar","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/","url":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/","name":"\u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0648\u064a\u0628 - \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a XSS - The Codest","isPartOf":{"@id":"https:\/\/thecodest.co\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png","datePublished":"2020-10-14T11:25:00+00:00","dateModified":"2026-04-27T10:24:05+00:00","description":"\u0639\u0632\u0632 \u0645\u0639\u0631\u0641\u062a\u0643 \u0628\u0623\u0645\u0627\u0646 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628. \u0627\u0643\u062a\u0634\u0641 \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062b\u0631 \u0647\u062c\u0645\u0627\u062a XSS \u0639\u0644\u0649 \u0627\u0644\u0645\u0639\u0627\u0645\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0631\u0641\u064a\u0629 \u0648\u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645.","breadcrumb":{"@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#breadcrumb"},"inLanguage":"ar","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"ar","@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#primaryimage","url":"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png","contentUrl":"https:\/\/thecodest.co\/app\/uploads\/2024\/05\/web-app-security.png","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/thecodest.co\/blog\/web-app-security-xss-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thecodest.co\/"},{"@type":"ListItem","position":2,"name":"Web app security &#8211; XSS vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/thecodest.co\/#website","url":"https:\/\/thecodest.co\/","name":"The Codest","description":"","publisher":{"@id":"https:\/\/thecodest.co\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thecodest.co\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ar"},{"@type":"Organization","@id":"https:\/\/thecodest.co\/#organization","name":"The Codest","url":"https:\/\/thecodest.co\/","logo":{"@type":"ImageObject","inLanguage":"ar","@id":"https:\/\/thecodest.co\/#\/schema\/logo\/image\/","url":"https:\/\/thecodest.co\/app\/uploads\/2024\/03\/thecodest-logo.svg","contentUrl":"https:\/\/thecodest.co\/app\/uploads\/2024\/03\/thecodest-logo.svg","width":144,"height":36,"caption":"The Codest"},"image":{"@id":"https:\/\/thecodest.co\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/pl.linkedin.com\/company\/codest","https:\/\/clutch.co\/profile\/codest"]},{"@type":"Person","@id":"https:\/\/thecodest.co\/#\/schema\/person\/7e3fe41dfa4f4e41a7baad4c6e0d4f76","name":"thecodest","image":{"@type":"ImageObject","inLanguage":"ar","@id":"https:\/\/secure.gravatar.com\/avatar\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5dbfe6a1e8c86e432e8812759e34e6fe82ebac75119ae3237a6c1311fa19caf4?s=96&d=mm&r=g","caption":"thecodest"},"url":"https:\/\/thecodest.co\/ar\/author\/thecodest\/"}]}},"_links":{"self":[{"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/posts\/3810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/comments?post=3810"}],"version-history":[{"count":9,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/posts\/3810\/revisions"}],"predecessor-version":[{"id":8105,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/posts\/3810\/revisions\/8105"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/media\/3809"}],"wp:attachment":[{"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/media?parent=3810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/categories?post=3810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thecodest.co\/ar\/wp-json\/wp\/v2\/tags?post=3810"}],"curies":[{"name":"\u062f\u0628\u0644\u064a\u0648 \u0628\u064a","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}