{"id":2137,"date":"2023-08-03T09:11:16","date_gmt":"2023-08-03T12:11:16","guid":{"rendered":"https:\/\/www.xlabs.com.br\/blog\/?p=2137"},"modified":"2023-08-03T09:11:17","modified_gmt":"2023-08-03T12:11:17","slug":"sobre-ataques-cross-site-scripting-xss","status":"publish","type":"post","link":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/","title":{"rendered":"Sobre ataques: Cross-site Scripting (XSS)"},"content":{"rendered":"\n<p>O XSS (Cross-Site Scripting) \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web, que permite a inser\u00e7\u00e3o de c\u00f3digos JavaScript ou HTML por parte de cibercriminosos, a fim de obter vantagens indevidas. Geralmente, essa t\u00e9cnica \u00e9 aplicada em p\u00e1ginas acess\u00edveis a todos os usu\u00e1rios, como a p\u00e1gina inicial de um site.<\/p>\n\n\n\n<p>Existem tr\u00eas tipos principais de ataques XSS: Reflected XSS, Stored XSS e DOM Based XSS. A seguir, voc\u00ea encontrar\u00e1 uma breve explica\u00e7\u00e3o sobre cada um deles.<\/p>\n\n\n\n<p>Boa leitura!<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2><strong>Reflected XSS<\/strong><\/h2>\n\n\n\n<p>Nesse tipo de ataque, o c\u00f3digo malicioso \u00e9 injetado na solicita\u00e7\u00e3o HTTP e retorna como parte da resposta do servidor. Essa resposta \u00e9 ent\u00e3o processada pelo navegador do usu\u00e1rio, permitindo que o c\u00f3digo seja executado.<\/p>\n\n\n\n<p>No exemplo a seguir, foi inserido um c\u00f3digo de script no campo de busca, resultando na sua reflex\u00e3o para o usu\u00e1rio.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"567\" height=\"293\" src=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem1.jpg\" alt=\"\" class=\"wp-image-2138\" srcset=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem1.jpg 567w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem1-300x155.jpg 300w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem1-150x78.jpg 150w\" sizes=\"(max-width: 567px) 100vw, 567px\" \/><figcaption class=\"wp-element-caption\"><em>Teste realizado em ambiente fechado atrav\u00e9s de um Virtual Machine de estudo oferecido pela OWASP Broken Web Applications Project.<\/em><\/figcaption><\/figure>\n\n\n\n<p>Como o pr\u00f3prio nome sugere, trata-se de uma vulnerabilidade conhecida como &#8220;reflected XSS&#8221; que envolve a reflex\u00e3o do c\u00f3digo malicioso para o usu\u00e1rio.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2><strong>Stored XSS<\/strong><\/h2>\n\n\n\n<p>Aqui, o c\u00f3digo malicioso \u00e9 armazenado no servidor e \u00e9 exibido a v\u00e1rios usu\u00e1rios quando acessam determinada p\u00e1gina. Isso pode ocorrer em se\u00e7\u00f5es de coment\u00e1rios, campos de formul\u00e1rio ou at\u00e9 mesmo em mensagens de f\u00f3runs.<\/p>\n\n\n\n<p>Na imagem a seguir apresentamos um exemplo simples de um script que pode ser inserido como um coment\u00e1rio na aplica\u00e7\u00e3o:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"567\" height=\"184\" src=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem2.jpg\" alt=\"\" class=\"wp-image-2139\" srcset=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem2.jpg 567w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem2-300x97.jpg 300w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem2-150x49.jpg 150w\" sizes=\"(max-width: 567px) 100vw, 567px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"567\" height=\"244\" src=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem3.jpg\" alt=\"\" class=\"wp-image-2140\" srcset=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem3.jpg 567w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem3-300x129.jpg 300w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem3-150x65.jpg 150w\" sizes=\"(max-width: 567px) 100vw, 567px\" \/><figcaption class=\"wp-element-caption\"><em>Teste realizado em ambiente fechado atrav\u00e9s de um Virtual Machine de estudo oferecido pela OWASP Broken Web Applications Project.<\/em><br><\/figcaption><\/figure>\n\n\n\n<p>A imagem seguinte \u00e9 uma demonstra\u00e7\u00e3o que o script ficou armazenado no c\u00f3digo fonte da p\u00e1gina:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"509\" height=\"324\" src=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem4.jpg\" alt=\"\" class=\"wp-image-2141\" srcset=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem4.jpg 509w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem4-300x191.jpg 300w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem4-150x95.jpg 150w\" sizes=\"(max-width: 509px) 100vw, 509px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Por fim, ao atualizar a p\u00e1gina pressionando F5, a presen\u00e7a de um XSS ser\u00e1 refletida na p\u00e1gina. Da mesma forma, se um usu\u00e1rio acessar a p\u00e1gina, automaticamente ser\u00e1 exposto \u00e0 mensagem armazenada no site.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"567\" height=\"303\" src=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem5.jpg\" alt=\"\" class=\"wp-image-2142\" srcset=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem5.jpg 567w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem5-300x160.jpg 300w, https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/Imagem5-150x80.jpg 150w\" sizes=\"(max-width: 567px) 100vw, 567px\" \/><figcaption class=\"wp-element-caption\"><em>Teste realizado em ambiente fechado atrav\u00e9s de um Virtual Machine de estudo oferecido pela OWASP Broken Web Applications Project.<\/em><\/figcaption><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h2><strong>DOM Based XSS<\/strong><\/h2>\n\n\n\n<p>Nesse caso, a vulnerabilidade est\u00e1 presente no Document Object Model (DOM) do navegador. O ataque ocorre quando o c\u00f3digo malicioso manipula o DOM da p\u00e1gina, explorando a forma como o navegador interpreta e executa o c\u00f3digo JavaScript.<\/p>\n\n\n\n<p><em>OBS: todos os testes foram realizados em ambiente de teste e n\u00e3o em bases reais.<\/em><\/p>\n\n\n\n<p>Refor\u00e7amos sempre a import\u00e2ncia de manter seu ambiente e suas aplica\u00e7\u00f5es bem protegidas para evitar que cibercriminosos se utilizem de vulnerabilidades para atacar sua empresa.&nbsp;<\/p>\n\n\n\n<p>A XLabs Security disp\u00f5e de solu\u00e7\u00f5es eficazes para <a href=\"https:\/\/conteudo.xlabs.com.br\/pentest-o-teste-de-intrusao-que-simula-o-ataque-de-um-hacker\">busca de vulnerabilidades<\/a> e <a href=\"https:\/\/conteudo.xlabs.com.br\/demonstracao-gratuita-waf\">prote\u00e7\u00e3o de aplica\u00e7\u00f5es web<\/a>. <a href=\"https:\/\/www.xlabs.com.br\/especialistas\/\">Fale agora mesmo com nossos especialistas<\/a> e saiba mais!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>O XSS (Cross-Site Scripting) \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web, que permite a inser\u00e7\u00e3o de c\u00f3digos JavaScript ou HTML por parte de cibercriminosos, a fim de obter vantagens indevidas. Geralmente, essa t\u00e9cnica \u00e9 aplicada em p\u00e1ginas acess\u00edveis a todos os usu\u00e1rios, como a p\u00e1gina inicial de um site. Existem tr\u00eas tipos principais de [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":2143,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[42,284,283,281,282,280,279,41],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog<\/title>\n<meta name=\"description\" content=\"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog\" \/>\n<meta property=\"og:description\" content=\"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\" \/>\n<meta property=\"og:site_name\" content=\"XLabs Security Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xlabs\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-03T12:11:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-03T12:11:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/sobre-ataques-xss-cross-site-scripting-blog-post-xlabs-security.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"488\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Evelyn Rocha\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog\" \/>\n<meta name=\"twitter:description\" content=\"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/sobre-ataques-xss-cross-site-scripting-blog-post-xlabs-security.png\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Evelyn Rocha\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\"},\"author\":{\"name\":\"Evelyn Rocha\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/186fa2419710709368bfa220767edb4b\"},\"headline\":\"Sobre ataques: Cross-site Scripting (XSS)\",\"datePublished\":\"2023-08-03T12:11:16+00:00\",\"dateModified\":\"2023-08-03T12:11:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\"},\"wordCount\":480,\"publisher\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#organization\"},\"keywords\":[\"Cross Site Scripting\",\"DOM\",\"DOM Based XSS\",\"Reflected XSS\",\"Stored XSS\",\"Vulnerabilidade\",\"XSS\",\"XSS Injection\"],\"articleSection\":[\"Artigos\"],\"inLanguage\":\"pt-BR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\",\"url\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\",\"name\":\"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#website\"},\"datePublished\":\"2023-08-03T12:11:16+00:00\",\"dateModified\":\"2023-08-03T12:11:17+00:00\",\"description\":\"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\/\/www.xlabs.com.br\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sobre ataques: Cross-site Scripting (XSS)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#website\",\"url\":\"https:\/\/www.xlabs.com.br\/blog\/\",\"name\":\"XLabs Security Blog\",\"description\":\"Seguran\u00e7a da Informa\u00e7\u00e3o\",\"publisher\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.xlabs.com.br\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#organization\",\"name\":\"XLabs Security\",\"url\":\"https:\/\/www.xlabs.com.br\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2020\/11\/Logotipo.png\",\"contentUrl\":\"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2020\/11\/Logotipo.png\",\"width\":478,\"height\":168,\"caption\":\"XLabs Security\"},\"image\":{\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.instagram.com\/xlabs.security\",\"https:\/\/www.linkedin.com\/company\/xlabs-security\/\",\"https:\/\/www.youtube.com\/channel\/UCPbGDmCQI7_UcAPmvVLi58g?view_as=subscriber\",\"https:\/\/www.facebook.com\/xlabs\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/186fa2419710709368bfa220767edb4b\",\"name\":\"Evelyn Rocha\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/fbfd8fc83a660edc367ca0dfbbb18e2e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/fbfd8fc83a660edc367ca0dfbbb18e2e?s=96&d=mm&r=g\",\"caption\":\"Evelyn Rocha\"},\"sameAs\":[\"http:\/\/www.xlabs.com.br\"],\"url\":\"https:\/\/www.xlabs.com.br\/blog\/author\/evelyn-rocha\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog","description":"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/","og_locale":"pt_BR","og_type":"article","og_title":"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog","og_description":"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.","og_url":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/","og_site_name":"XLabs Security Blog","article_publisher":"https:\/\/www.facebook.com\/xlabs","article_published_time":"2023-08-03T12:11:16+00:00","article_modified_time":"2023-08-03T12:11:17+00:00","og_image":[{"width":1000,"height":488,"url":"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/sobre-ataques-xss-cross-site-scripting-blog-post-xlabs-security.png","type":"image\/png"}],"author":"Evelyn Rocha","twitter_card":"summary_large_image","twitter_title":"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog","twitter_description":"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.","twitter_image":"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2023\/08\/sobre-ataques-xss-cross-site-scripting-blog-post-xlabs-security.png","twitter_misc":{"Escrito por":"Evelyn Rocha","Est. tempo de leitura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#article","isPartOf":{"@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/"},"author":{"name":"Evelyn Rocha","@id":"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/186fa2419710709368bfa220767edb4b"},"headline":"Sobre ataques: Cross-site Scripting (XSS)","datePublished":"2023-08-03T12:11:16+00:00","dateModified":"2023-08-03T12:11:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/"},"wordCount":480,"publisher":{"@id":"https:\/\/www.xlabs.com.br\/blog\/#organization"},"keywords":["Cross Site Scripting","DOM","DOM Based XSS","Reflected XSS","Stored XSS","Vulnerabilidade","XSS","XSS Injection"],"articleSection":["Artigos"],"inLanguage":"pt-BR"},{"@type":"WebPage","@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/","url":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/","name":"Sobre ataques: Cross-site Scripting (XSS) &ndash; XLabs Security Blog","isPartOf":{"@id":"https:\/\/www.xlabs.com.br\/blog\/#website"},"datePublished":"2023-08-03T12:11:16+00:00","dateModified":"2023-08-03T12:11:17+00:00","description":"Entenda mais sobre o ataque XSS (Cross-Site Scripting), que \u00e9 uma vulnerabilidade comum encontrada em aplica\u00e7\u00f5es web.","breadcrumb":{"@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.xlabs.com.br\/blog\/sobre-ataques-cross-site-scripting-xss\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/www.xlabs.com.br\/blog\/"},{"@type":"ListItem","position":2,"name":"Sobre ataques: Cross-site Scripting (XSS)"}]},{"@type":"WebSite","@id":"https:\/\/www.xlabs.com.br\/blog\/#website","url":"https:\/\/www.xlabs.com.br\/blog\/","name":"XLabs Security Blog","description":"Seguran\u00e7a da Informa\u00e7\u00e3o","publisher":{"@id":"https:\/\/www.xlabs.com.br\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.xlabs.com.br\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/www.xlabs.com.br\/blog\/#organization","name":"XLabs Security","url":"https:\/\/www.xlabs.com.br\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2020\/11\/Logotipo.png","contentUrl":"https:\/\/www.xlabs.com.br\/blog\/wp-content\/uploads\/2020\/11\/Logotipo.png","width":478,"height":168,"caption":"XLabs Security"},"image":{"@id":"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.instagram.com\/xlabs.security","https:\/\/www.linkedin.com\/company\/xlabs-security\/","https:\/\/www.youtube.com\/channel\/UCPbGDmCQI7_UcAPmvVLi58g?view_as=subscriber","https:\/\/www.facebook.com\/xlabs"]},{"@type":"Person","@id":"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/186fa2419710709368bfa220767edb4b","name":"Evelyn Rocha","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.xlabs.com.br\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/fbfd8fc83a660edc367ca0dfbbb18e2e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fbfd8fc83a660edc367ca0dfbbb18e2e?s=96&d=mm&r=g","caption":"Evelyn Rocha"},"sameAs":["http:\/\/www.xlabs.com.br"],"url":"https:\/\/www.xlabs.com.br\/blog\/author\/evelyn-rocha\/"}]}},"_links":{"self":[{"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/posts\/2137"}],"collection":[{"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/comments?post=2137"}],"version-history":[{"count":3,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/posts\/2137\/revisions"}],"predecessor-version":[{"id":2146,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/posts\/2137\/revisions\/2146"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/media\/2143"}],"wp:attachment":[{"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/media?parent=2137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/categories?post=2137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xlabs.com.br\/blog\/wp-json\/wp\/v2\/tags?post=2137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}