Collected research
Cross-Site Scripting Attacks in Social Network APIs
The authors name Cross-API Scripting: XSS carried through RESTful social-network APIs, where the network and its third-party apps each assume the other escapes user data. A fuzzer injected test vectors into configured API endpoints and flagged responses that echoed them or came back ill-formed, finding flaws in eleven social networks and in 107 of 143 apps examined.
Record
- Researcher
- Yuqing Zhang, Xiali Wang, Qihan Luo and Qixu Liu
- Published by
- ieee-security.org
- Format
- Whitepaper
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Yuqing Zhang, Xiali Wang, Qihan Luo and Qixu Liu, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .