Patent ID: 8448241

Claim:
A method for testing susceptibility of an Internet website to process cross-site scripting instructions, comprising: from within a browser, the browser being executed by a processor; receiving a cross-site scripting instruction at an extension interface of the browser, the cross-site scripting instruction being received from a website input prompt generated by the Internet website, the extension interface being integrated into the web browser so as to not interrupt normal web browser activity, the extension interface being configured to examine the cross-site scripting instruction and generate a corresponding script code; communicating with the Internet website through the browser, the communicating including transmitting the script code to the Internet website being executed by a web server, the script code being designed to cause a desired action on the part of the Internet website; and receiving a response from the web server in reply to the communication with the Internet website, the response being intercepted by the extension interface; wherein the extension interface parses and examines the response to determine if the desired action is performed by the Internet website; wherein the desired action being performed is indicative of a security breach on the Internet website.