Series

Cross-site Scripting

A practical guide to cross-site scripting in Java and React applications. Across this multipart series, explore reflected, stored, and DOM-based XSS, secure coding patterns, modern browser defenses, and the architectural decisions that help prevent XSS at scale.

Nov 10, 2026
Nov 10, 202620 min read
Cross-Site Scripting (XSS) in Java and React: Reflected and Stored XSS (Part 1)
A search query or profile bio should remain data when it reaches the browser. Cross-site scripting breaks that boundary. The OWASP Top 10:2025 places XSS (CWE-79) under A05:2025 Injection and reports
20 min read

Posts in this series

Cross-Site Scripting (XSS) in Java and React: Reflected and Stored XSS (Part 1)