Standard: XSS

[lukefretwell]

Reference: Standards

What standard do you recommend?

Name: XSS
Link: https://developer.mozilla.org/en-US/docs/Glossary/Cross-site_scripting
Guidance: https://www.cisa.gov/news-events/news/website-security
Indicator: Security

Why

CISA:

Implement cross-site scripting (XSS) and cross-site request forgery (XSRF) protections. Protect website systems, as well as website visitors, by implementing XSS and XSRF protections.

Dev

(for ScanGov after review)

Update:

• Guidance: https://github.com/ScanGov/data/blob/main/standards/guidance.json
• Audits: https://github.com/ScanGov/data/blob/main/standards/audits.json
• Review: https://standards.scangov.org/