JavaScript data exposure

Introduction Cross-Site Script Inclusion (XSSI) is one of the lesser-known web vulnerabilities, yet its impact can be devastating when ignored. While most developers are familiar with Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF), XSSI often flies under the radar. If you are putting sensitive data in your JavaScript files, an attacker is probably already…