Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying JavaScript Security
  • Table Of Contents Toc
JavaScript Security

JavaScript Security

By : Eugene Liang
2 (1)
Buy this Book
close
close
JavaScript Security

JavaScript Security

2 (1)
By: Eugene Liang
Buy this Book

Overview of this book

This book is for JavaScript developers having basic web development knowledge and also for those who want to explore the security issues that arise from the use of JavaScript. Prior knowledge of how JavaScript is used, such as for DOM manipulation or to perform Ajax operations, is assumed.
Table of Contents (8 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. JavaScript and the Web
Icon
1. JavaScript and the Web
Icon
JavaScript and your HTML/CSS elements
Icon
JavaScript beyond the client
Icon
JavaScript security issues
Icon
Summary
2
2. Secure Ajax RESTful APIs
Icon
2. Secure Ajax RESTful APIs
Icon
Building a RESTful server
Icon
Basic defense against similar attacks
Icon
Summary
3
3. Cross-site Scripting
Icon
3. Cross-site Scripting
Icon
What is cross-site scripting?
Icon
Examples of cross-site scripting
Icon
Defending against cross-site scripting
Icon
Summary
4
4. Cross-site Request Forgery
Icon
4. Cross-site Request Forgery
Icon
Introducing cross-site request forgery
Icon
Other examples of CSRF
Icon
Other forms of protection
Icon
Summary
5
5. Misplaced Trust in the Client
Icon
5. Misplaced Trust in the Client
Icon
When trust gets misplaced
Icon
Summary
6
6. JavaScript Phishing
chevron up
Icon
6. JavaScript Phishing
Icon
What is JavaScript phishing?
Icon
Examples of JavaScript phishing
Icon
Defending against JavaScript phishing
Icon
Summary
7
Index
Icon
Index

Examples of JavaScript phishing

We will cover several examples of phishing in this section, most of which can be achieved through the deceptive, and, sometimes clever, use of JavaScript in tandem with CSS and HTML. Why in tandem with CSS and HTML? This is because much of the deception involves the use of a fake website that looks like the original site, tricking users into thinking that the website is real. Let's start with a classic example on eBay.

Classic examples

There are numerous examples surrounding eBay; some of the most common examples involve the use of sending a fake e-mail and a fake website that looks like eBay, enticing you with certain reasons to make you log in to the fake site so that you willingly submit your login information.

Most importantly, creating a phishing site just requires you to understand the basics of copy-paste and how to fail-safe a web page. Here is an example:

The real and authentic eBay website

The next example shows a fake eBay page:

Fake eBay website that...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
JavaScript Security
End of Section 6
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon