@easyprepcomptia: So it’s just a comment box… what could go wrong?” That comment runs JavaScript. That script runs in your session. And now the attacker is logged in as you. Welcome to XSS. #XSS #WebSecurity #CyberSecurity #AppSec #DevSecOps#webdevelopment #JavaScript #Programming #softwareengineer #techtoktips #LearnOnTikTok #TechExplained #SecurityTok