WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense

Code 10

Attacker’s instance.

<script type="text/javascript">

var runtimeId = "59b6d298f36ae";

[codes for MutationObserver and

beforescriptexecute]

...

</script>

...

<script runtimeId="59b6d298f36ae" type="text/

javascript">

...

</script>