Why you might need this
Once the code has been injected, it can be used to steal data from users, launch malware and other nefarious and damaging activity.
What you need to get started:
- Expedited WAF add-on is setup in front of your application.
How To Stop XSS Attacks
On the Stop Attacks page of your Expedited WAF dashboard, select the Stop Suspected Attacks option.
- Stopping suspected attacks is a an additional layer of security on your site and should function alongside solid development practices, patching and testing
More reading and framework resources on prevention of XSS attacks
If you need help with improving your application's security, you can Book a Demo (free) to talk to a security engineer about your application security and compliance requirements. If you're ready to go, you can add the Expedited WAF add-on to your Heroku application in about 15 minutes.