Academy
Practitioner track

Cross-Site Scripting

Reflected, stored, DOM: where input becomes script, and how encoding stops it.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How XSS worksSinks, reflection, and why context decides the payload.
  2. 02Lab: reflected greetingA guestbook echoes your name unencoded. Prove it executes.
  3. 03XSS quizThree questions on shapes, sinks, and fixes.