Students explore how attackers inject client-side scripts into web pages. They demonstrate the impact by creating a harmless pop-up alert on a test site and then discuss how this could steal cookies.

Similar Lessons