Patent ID: 8949990
Filing Date: 2015-02-03
Classification: G06F,H04L

Abstract:
1. A method of detecting XSS (Cross-site Scripting) vulnerable URLs (Uniform Resource Locator), comprising: incorporating a piece of test code designed to expose an XSS vulnerability into a dynamic URL; loading the dynamic URL into a browser; sending a first request to a web server in connection with said dynamic URL; receiving a web page from said web server generated in response to said first request that includes script code based upon said test code; loading said web page into said browser; executing said script code of said web page by said browser; sending a second request to said web server as a result of said browser executing said script code, said script code including said second request; and reporting the dynamic URL as XSS vulnerable when it is determined that said browser executed said script code and it is determined that said browser sent said second request as a result of said browser executing said script code.