Secure Login is a Firefox extension that is similar to Opera’s Wand feature. Instead of logging into a website by filling out the username and password form you login by clicking a button or using a shortcut. This is a great way to prevent the execution of malicious Javascript code that could “phish” your data.

Javascript will be temporarily disabled during login and the data is send right to the website that you want to login to. The Domain that you are currently on and that you want to login to are compared to ensure that you are indeed at the right website. A mismatch would result in a popup warning.

>>Permalink

Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on this link from another website, instant message, or simply just reading a web board or email message.

>>Permalink