·In the first place, is it possible to stop using application support?
·If it is possible to stop the vulnerability by setting up a Web server, what kind of countermeasures can be taken?
·I don't set cookie information with an application, but is it still dangerous if cookies are eavesdropped? (Is there important information that you are not aware of in general?)
Is it possible to stop it with application support?
Yes, it's possible.AngularJS also has several security APIs, so please refer to them.
If the vulnerability can be stopped by configuring a web server, what action can be taken?
Because the vulnerability has a layer and XSS is a vulnerability in the web application layer,
Countermeasures must be addressed in a web application.
The server cannot take action.
Is it still dangerous if cookies are eavesdropped even though they are not set in the application? (Is there important information that you are not aware of in general?)
The vulnerabilities of web applications are quite wide, so it's hard to ask each question, so let's start with
It has also been shown in IPA.I think it would be good to take a look at the security course.
© 2022 OneMinuteCode. All rights reserved.