Answers

Q1: XSS is a server side vulnerability

A1: Yes/no

Q2: Craft a very simple HTML broken image tag with a source of a picture with a source of "x".

A2:

Q3: Now add an event handler that executes the javascript code for printing the page

A3:

Q4: Name 3 programming languages in which XSS can occur without besides JS

A4:

• 1
• 2
• 3

Q5: Name 2 context in which XSS can occur outside of the HTML tag insertion

A5:

• 1
• 2