@Article{, title={Proposed Method to Detect and Prevent Reflected Cross-Site Script Attack}, author={Iman Fareed Khazal and Mohammed Abdulridha Hussain}, journal={Journal of Basrah Researches (Sciences) مجلة ابحاث البصرة ( العلميات)}, volume={47}, number={1}, pages={9-23}, year={2021}, abstract={Due to the widespread use of web applications and the dramatic increase in the number of application users, most web applications contain flaws that make them vulnerable to a variety of attacks. One of the most common attacks is Cross-Site Script (XSS). In an XSS attack, the attacker exploits an XSS vulnerability in a web application and injects a malicious script into it. The majority of preventive measures are client-side, reducing the performance of the web browser. It has been suggested as a server side method in this paper. The Prevent Reflected-XSS Server (PRS) is a suggestion server that checks the domain name of a link’s Uniform Resource Locator (URL) to see if it is on the untrusted list of malicious sites. If it does not exist, Check that link to see if it contains any malicious script. If the URL is injected, the malicious URL is replaced with a sterilized URL. This method was tested using an open-source application and was successful in determining the harmful code within the URL and sterilizing it in an average of 0.33 seconds.

} }