• SHIVANGI TRIVEDI

Dynamic web pages are widely used by web application to provide better user experience and to attract more web users. The web application uses the client side and server side scripts to provide dynamic behavior to the web pages. The most hazardous attack now on web applications is Cross site scripting attack (xss). Cross site scripting attack uses malicious scripts and links injected into the web pages .to steal sensitive data from the victims These attacks are used to gain unauthorized access into the system, and can execute malicious code in legitimate user web pages. In vulnerability Assessment and Penetration testing the most vulnerable attack on web pages is Cross Site Scripting (xss).Remote code execution, malicious code execution is done by the cross site scripting (xss) attack. Cross site scripting attack can take remote access of the other web pages and there an attacker will execute malicious code, can modify the content of the website. In this research paper a mechanism shall be developed which can be helpful to prevent the cross site scripting on the web pages in web-apps. Cross site scripting attack is hard to prevent, although this some solutions in this research paper can be useful for providing some better solution to prevent the Cross site scripting injection.

XSS, Scripting, Injection Attack, Vulnerability, Web Applications, DOM based Cross.

"“Cross Site Scripting (XSS)attack in web application and its mitigation using prevention mechanism to secure Web Pages” ", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 1, page no.220-224, January-2019, Available :http://www.jetir.org/papers/JETIR1901231.pdf

"“Cross Site Scripting (XSS)attack in web application and its mitigation using prevention mechanism to secure Web Pages” ", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 1, page no. pp220-224, January-2019, Available at : http://www.jetir.org/papers/JETIR1901231.pdf