WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense

Code 7

Original elements.

<a  id⁢="link1" onclick="alert(benign)"

runtimeId="<?php echo $id4trustedBlocks;?>

">link</a>

...

<iframesrc="http://..." runtimeId="<?php echo

⁢$id4trustedBlocks;? >"></iframe>