NAME

ThreatDetector::Handlers::XSS - Handler for cross-site scripting (XSS) attempts

SYNOPSIS

use ThreatDetector::Handlers::XSS qw(handle_xss);

handle_xss($entry);

DESCRIPTION

Emits a JSON alert when a log entry indicates a potential cross-site scripting (XSS) attack based on common payload patterns such as `<script>`, event handler attributes (e.g. `onerror=`), or encoded equivalents. XSS can be used to hijack sessions, redirect users, or exfiltrate data.

AUTHOR

Jason Hall <jason.kei.hall@gmail.com>