English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

Cross Site Scripting (XSS) is one of the most critical vulnerabilities existin web applications. XSS can be prevented by encoding untrusted data that areloaded into browser content of web applications. Security ApplicationProgramming Interfaces (APIs) such as OWASP ESAPI provide output encodingfunctionalities for programmers to use to protect their applications from XSSattacks. However, XSS still being ranked as one of the most criticalvulnerabilities in web applications suggests that programmers are noteffectively using those APIs to encode untrusted data. Therefore, we conductedan experimental study with 10 programmers where they attempted to fix XSSvulnerabilities of a web application using the output encoding functionality ofOWASP ESAPI. Results revealed 3 types of mistakes that programmers made whichresulted in them failing to fix the application by removing XSSvulnerabilities. We also identified 16 usability issues of OWASP ESAPI. Weidentified that some of these usability issues as the reason for mistakes thatprogrammers made. Based on these results, we provided suggestions on how theusability of output encoding APIs should be improved to give a betterexperience to programmers.

Fighting Against XSS Attacks: A Usability Evaluation of OWASP ESAPI Output Encoding