An anonymous reader writes "Security ****ysts at NeoSmart Technologies have revisited the now-famous XSS-type security vulnerabilities and attempt to re-classify their status as a security vulnerability. The argument is that XSS vulnerabilities are not a mark of bad or insecure code but rather a nasty but unavoidable risk that's a part of JavaScript - and that even then, XSS 'vulnerable' sites are no less dangerous or vulnerable at heart." Are they unavoidable, or just a symptom of lazy coding, or both?
Link To Original Article
XSS Vulnerabilities Reviewed and Re-Classified
Linear Mode
