Defence in depth

Layering several independent controls so a single missed check is not a catastrophe; e.g. output encoding plus HttpOnly cookies plus a CSP.

Learn it hands-on

• Cross-Site Scripting (XSS) Medium