Torgeek
What is XSS protection in Salesforce?
We call this cross-site scripting, or XSS for short. XSS is an injection vulnerability that occurs when an attacker inserts unauthorized JavaScript, VBScript, HTML, or other active content into a web page. When subsequent users view the page, the malicious code executes or attacks the user.
Is CSP enough for XSS?
A Content Security Policy (CSP) helps to ensure any content loaded in the page is trusted by the site owner. CSPs mitigate cross-site scripting (XSS) attacks because they can block unsafe scripts injected by attackers. However, the CSP can easily be bypassed if it is not strict enough.
Can WAF prevent XSS?
AWS WAF offers the following protections to prevent SQLi and XSS attacks: Built-in SQLi and XSS engines. AWS Managed Rules available for SQLi and XSS injection attacks.
