Research Article
WebMTD: Defeating Cross-Site Scripting Attacks Using Moving Target Defense
Table 1
Inline/external JavaScript block usage.
| | Website | No. of elm. with handlers | No. of iframes | No. of inline script blocks | No. of external script blocks | Ratio of inline blocks |
| | google.com | 3 | 0 | 10 | 2.9 | 0.78 |
| | youtube.com | 0 | 3 | 11.3 | 6.4 | 0.64 |
| | facebook.com | 6 | 2 | 13.8 | 11.75 | 0.54 |
| | baidu.com | 1 | 0 | 12.3 | 5.1 | 0.71 |
| | yahoo.com | 5 | 0 | 11.2 | 19.7 | 0.36 |
| | Top 100 sites (avg) | 3 | 1 | 14.9 | 10.1 | 0.60 |
| | osCommerce | 2 | 0 | 8.8 | 4.6 | 0.65 |
|
|
