The web has become paramount part of our lives. Unfortunately, as our dependency on the web increases, so does the interest of attackers in enslaving web applications and web-base information systems. Previous work in the field of web application security has mainly focused on the mitigation of Cross Site Scripting and SQL injection attacks. XSS, or Cross Site Scripting, allows an attacker to execute code on the target website from user's browser of ten causing side effects such as data compromise, or the stealing of a user session. This can allow an attacker to impersonate a user to steal their details, or act in their place without consent. It is caused by scripts, which do not sanitize user input. In general, XSS attack is easy to execute, but difficult to detect and prevent. It can be prevented at both client and server. Several server side solutions of XSS attacks do exist, but such techniques have not been universally applied, because of their deployment overhead. In this paper analyzing of client side solution to detect attack and which technique is appropriate is done. In this paper focus is on the analysis of most of the client side solution presented yet and provides a comparative view of the solutions.

XSS attacks SQL injection Client side solution