Ctrl K
Sign inStart free
Frontend · Junior · Theory

What is an XSS attack, and how does the frontend protect against it?

~4 min by voice

How to approach it

The interviewer wants to see whether you understand that XSS means someone else's code running in the context of your site, and whether you know the concrete layers of frontend defense: escaping on output, the dangerous framework APIs, sanitizing, CSP and HttpOnly.

Have you seen this question in a real interview?
Answers0
Avg. score—
Strong—
Practiced0
Topics
xsscsp
Similar questionsWhere would you store the auth token in an SPA, in localStorage or in a cookie, and which attacks does that protect against and which doesn't it? Mid-levelHow do you protect a frontend against XSS, and how would you roll out a Content Security Policy in a large application that's already in production? Senior

Answer by voice

The interviewer will ask this question and listen. Think out loud and ask for a hint if you need one. When you're done, pause or tap “That's my answer”. In about a minute, your score and the points you covered show up here.

Sign in to answer

Best with headphones · ~4 min