From the course: Writing Secure Code in iOS by Infosec

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Cross-site attacks

Cross-site attacks

From the course: Writing Secure Code in iOS by Infosec

Start my 1-month free trial Buy for my team

Cross-site attacks

“

- Let's now talk about Cross-Site Attacks. 2 These are difficult 3 because there's a degree of social engineering involved, 4 which you don't really have a whole lot of control over. 5 Nonetheless, we need to be aware of them 6 and we need to do what we can to protect users. 7 A Cross-Site Attack is not a language-specific problem, 8 it's usually a result of poor coding 9 combined with social engineering. 10 It usually occurs on websites, 11 and the primary issue 12 is lack of input sanitization on the website. 13 If your Swift app interacts with a website, 14 like allowing users to post or read comments, 15 ensure that you don't inadvertently pass scripts 16 hidden in the HTML. 17 You don't want to pass them to the website 18 or to the device browser. 19 There are two major categories of Cross-Site Attacks, 20 Cross-Site Scripting, also known as XSS, 21 and Cross-Site Request Forgery, also known as CSRF, 22 sometimes…

Contents