xss

Improving Web Security with the Content Security Policy

Ian Oxley looks at using CSP to create a whitelist of allowable resource types and locations, to prevent website injection attacks such as XXS.

Orkut Hit by XSS Worm

Twitter Attacked by Thousands of Tweet Worms