1. React
  2. ReactConf AU
  3. 2020
  4. What is an XSS attack - and why should you care?

What is an XSS attack - and why should you care?

With victims like eBay, McAfee, and Yahoo, XSS attacks involve injecting malicious scripts into the DOM of unprotected web applications, resulting in access to cookies, session tokens, and sensitive data stored in the browser.

Carmen Chung at ReactConf AU 2020

XSS (Cross-Site Scripting) attacks are often referred to as the "most common vulnerability online". With victims like eBay, McAfee, and Yahoo, these attacks involve injecting malicious scripts into the DOM of unprotected web applications, resulting in access to cookies, session tokens, and sensitive data stored in the browser. But is this attack actually possible against React apps? Come and find out the answer in this talk by Carmen Chung, who will (demo gods willing) show you what sort of damage can actually be done.