A Taxonomy of XSS Attack Detections in Mobile Environments based on Automation Capabilities

HTML and JavaScript have become the go-to languages for many developers making apps for multiple smartphone operating systems. HTML provides developers with a way to make a universal framework to build cross-platform apps. This convenience does not come without risk, however. Being HTML-based, these apps are susceptible to Cross-Site Scripting (XSS). In this paper, we break down what a cross-site scripting attack is, how it works, and the security risks that come with it. We also investigate several different methods used to detect and path code with vulnerability.