Cross-site scripting enabled on 1000 major sites – including financial sites

Here is a warm and fuzzy post to begin your Wednesday morning.  I admit that this is a little scary, but somewhat expected.  So many sites want to take the easy way out and allow integration at the sacrifice of security.  There are good, reliable ways to have both if these organizations would only take the time to do it right.

https://thestack.com/security/2016/02/23/cross-site-scripting-enabled-on-1000-major-sites-including-financial-sites/

#top1million #websites #XSS