John was explaining about an attack that accepts user input without validating it and uses that input in a response. what type of attack was he describing? XSS
What is an XSS attack?
- A client-side code injection attack is called cross-site scripting (XSS).
- By embedding malicious code in a genuine web page or online application, the attacker hopes to run harmful scripts in the victim's web browser.
- When the victim accesses the website or online application that runs the malicious code, the attack really takes place.
- The web page or web application serves as a delivery system for the malicious script to reach the user's browser.
- Forums, message boards, and websites that permit comments are vulnerable targets that are frequently subject to cross-site scripting assaults.
To learn more about cross-site scripting (XSS),refer:
https://brainly.com/question/4931135
#SPJ4