CODEWITHSUNDEEP
javascriptxmlxmlhttprequestxssclient-side-attacks
Qiimiia
Qiimiia

Reputation: 607

XSS Risks in XML Transfer With HTTPS

I have been checking lots of recourses but still have problems finding my answer, so I will ask it directly: I have a situation in my website where

  1. I make an API call and in response I get HTML document
  2. Then I add some data to this HTML document, create an XML from it and send the XML with API (I do not show these files anywhere e.g. in the DOM, nor use it in any other ways on the client-side)

What are the risks of XSS attacks in this process? Do I need to do encode/decode or sanitization or both? Should I do it for the HTML response or the created XML? Should this be done on client-side or server-side?

Upvotes: 0

Views: 57

Answers (0)

Related Questions