Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Ask HN: Best Approaches to Prevent Session Hijacking?. Parent comment
1. Cross-site scripting (XSS -http://en.wikipedia.org/wiki/Cross-site_scripting)
2. Cross-site forgery (http://en.wikipedia.org/wiki/Cross-site_request_forgery)
It doesn't necessarily mean the attacker has compromised the server, but they may have been able to post code to a page, e.g. through a form posting.
There are no comments on this comment yet.
1. Cross-site scripting (XSS -http://en.wikipedia.org/wiki/Cross-site_scripting)
2. Cross-site forgery (http://en.wikipedia.org/wiki/Cross-site_request_forgery)
It doesn't necessarily mean the attacker has compromised the server, but they may have been able to post code to a page, e.g. through a form posting.