{"id":10265,"date":"2026-11-08T11:20:36","date_gmt":"2026-11-08T08:20:36","guid":{"rendered":"https:\/\/www.yunuskaytan.com\/?p=10265"},"modified":"2026-11-08T11:20:36","modified_gmt":"2026-11-08T08:20:36","slug":"xss-cross-site-scripting-nedir","status":"publish","type":"post","link":"https:\/\/www.yunuskaytan.com\/en\/yk\/xss-cross-site-scripting-nedir\/","title":{"rendered":"XSS (Cross-Site Scripting) Nedir?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Web uygulamalar\u0131 geli\u015ftik\u00e7e kullan\u0131c\u0131 etkile\u015fimi artm\u0131\u015f, bu durum istemci taraf\u0131nda \u00e7al\u0131\u015fan kodlar\u0131n g\u00fcvenli\u011fini daha kritik hale getirmi\u015ftir. \u0130nternet d\u00fcnyas\u0131nda en s\u0131k kar\u015f\u0131la\u015f\u0131lan web zafiyetlerinden biri olan XSS (Cross-Site Scripting), sald\u0131rganlar\u0131n g\u00fcvenilir web siteleri \u00fczerinden kurbanlar\u0131n taray\u0131c\u0131lar\u0131nda k\u00f6t\u00fc ama\u00e7l\u0131 kod \u00e7al\u0131\u015ft\u0131rmas\u0131na zemin haz\u0131rlar. Web g\u00fcvenli\u011fi alan\u0131nda temel bir kavram olan xss nedir sorusunu anlamak, hem geli\u015ftiricilerin g\u00fcvenli kod yazmas\u0131 hem de g\u00fcvenlik uzmanlar\u0131n\u0131n sistemleri denetlemesi a\u00e7\u0131s\u0131ndan kritik bir ad\u0131md\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">XSS Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cross-Site Scripting (XSS), bir web uygulamas\u0131n\u0131n kullan\u0131c\u0131dan ald\u0131\u011f\u0131 veriyi yeterince filtrelemeden veya do\u011frulamadan do\u011frudan web sayfas\u0131na dahil etmesi sonucu ortaya \u00e7\u0131kan bir zafiyettir. Bu a\u00e7\u0131k sayesinde sald\u0131rgan, HTML veya JavaScript gibi istemci tarafl\u0131 betikleri hedef kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131nda \u00e7al\u0131\u015ft\u0131rabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Normal \u015fartlarda taray\u0131c\u0131lar, Ayn\u0131 K\u00f6ken Politikas\u0131 (Same-Origin Policy &#8211; SOP) gere\u011fi farkl\u0131 kaynaklardan gelen betiklerin birbirlerinin verilerine eri\u015fmesini engeller. Ancak XSS sald\u0131r\u0131s\u0131nda zararl\u0131 kod do\u011frudan hedeflenen web sitesinin bir par\u00e7as\u0131ym\u0131\u015f gibi taray\u0131c\u0131ya iletildi\u011finden, taray\u0131c\u0131 bu kodu g\u00fcvenilir kabul eder. Kod kurban\u0131n taray\u0131c\u0131s\u0131nda \u00e7al\u0131\u015ft\u0131\u011f\u0131nda sald\u0131rgan oturum \u00e7erezlerini \u00e7alabilir, oturumu ele ge\u00e7irebilir (session hijacking), sahte formlar ile kimlik bilgilerini toplayabilir veya kullan\u0131c\u0131 ad\u0131na istekler g\u00f6nderebilir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">XSS T\u00fcrleri Nelerdir?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">XSS sald\u0131r\u0131lar\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 kodun sisteme nas\u0131l iletildi\u011fine ve nerede depoland\u0131\u011f\u0131na ba\u011fl\u0131 olarak \u00fc\u00e7 temel kategoriye ayr\u0131l\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Reflected (Yans\u0131yan) XSS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Reflected XSS, zararl\u0131 beti\u011fin do\u011frudan HTTP iste\u011fi (\u00e7o\u011funlukla GET parametresi) ile g\u00f6nderildi\u011fi ve sunucudan d\u00f6nen yan\u0131tta an\u0131nda geri yans\u0131t\u0131ld\u0131\u011f\u0131 durumdur. Bu sald\u0131r\u0131 t\u00fcr\u00fcnde zararl\u0131 kod veritaban\u0131nda saklanmaz. Sald\u0131rgan, haz\u0131rlad\u0131\u011f\u0131 zararl\u0131 parametreleri i\u00e7eren bir ba\u011flant\u0131y\u0131 (URL) kurbana e-posta, mesajla\u015fma veya sosyal m\u00fchendislik y\u00f6ntemleriyle t\u0131klat\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Stored (Kal\u0131c\u0131) XSS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">XSS t\u00fcrleri aras\u0131nda en tehlikeli olanlardan biridir. Zararl\u0131 kod sunucu taraf\u0131nda; genellikle bir veritaban\u0131nda, yorum alan\u0131nda, profil bilgisinde veya mesaj panosunda kal\u0131c\u0131 olarak depolan\u0131r. \u0130lgili sayfay\u0131 ziyaret eden her masum kullan\u0131c\u0131, sunucunun veritaban\u0131ndan \u00e7ekti\u011fi bu zararl\u0131 beti\u011fi taray\u0131c\u0131s\u0131nda \u00e7al\u0131\u015ft\u0131r\u0131r. Sald\u0131rgan\u0131n tek bir payload yerle\u015ftirmesi, sayfay\u0131 ziyaret eden y\u00fczlerce veya binlerce kullan\u0131c\u0131n\u0131n etkilenmesine yol a\u00e7abilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. DOM-based XSS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DOM-based XSS durumunda a\u00e7\u0131k, sunucu taraf\u0131ndaki bir kod hatas\u0131ndan de\u011fil, istemci taraf\u0131ndaki JavaScript kodlar\u0131n\u0131n g\u00fcvensiz DOM (Document Object Model) manip\u00fclasyonundan kaynaklan\u0131r. Sayfadaki JavaScript, URL par\u00e7as\u0131 (<code>hash<\/code> veya <code>search<\/code> parametreleri gibi) kullan\u0131c\u0131 girdilerini al\u0131p g\u00fcvenli olmayan metotlarla sayfaya yazd\u0131rd\u0131\u011f\u0131nda tetiklenir. Bu senaryoda zararl\u0131 payload bazen sunucuya hi\u00e7 iletilmeden yaln\u0131zca taray\u0131c\u0131 \u00fczerinde i\u015flenir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Uygulamal\u0131 Kod Senaryolar\u0131<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bir a\u00e7\u0131\u011f\u0131n mant\u0131\u011f\u0131n\u0131 kavraman\u0131n en etkili yolu, zafiyet bar\u0131nd\u0131ran kod yap\u0131s\u0131 ile g\u00fcvenli hali aras\u0131ndaki fark\u0131 g\u00f6rmektir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zafiyet Bar\u0131nd\u0131ran PHP \u00d6rne\u011fi<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A\u015fa\u011f\u0131daki \u00f6rnekte kullan\u0131c\u0131dan al\u0131nan arama terimi hi\u00e7bir filtreleme uygulanmadan do\u011frudan sayfaya yazd\u0131r\u0131lmaktad\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;?php\n\/\/ Gelen arama parametresi kontrols\u00fcz \u015fekilde ekrana bas\u0131l\u0131yor\n$search = $_GET['q'];\necho \"&lt;div&gt;Arama sonucu: \" . $search . \"&lt;\/div&gt;\";\n?&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sald\u0131rgan, arama kutusuna veya URL parametresine \u015fu payload&#8217;u girdi\u011finde:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;script&gt;alert('XSS A\u00e7\u0131\u011f\u0131!');&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Taray\u0131c\u0131 bu metni saf metin olarak de\u011fil, \u00e7al\u0131\u015ft\u0131r\u0131labilir bir betik olarak yorumlar ve ekranda uyar\u0131 penceresi a\u00e7\u0131l\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">G\u00fcvenli Hale Getirilmi\u015f PHP Kodu<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Kullan\u0131c\u0131 girdisini ekrana basmadan \u00f6nce HTML karakterlerini zarars\u0131z kar\u015f\u0131l\u0131klar\u0131na d\u00f6n\u00fc\u015ft\u00fcrmek (HTML entity encoding) gerekir:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;?php\n$search = $_GET['q'];\n\/\/ htmlspecialchars fonksiyonu &lt; ve &gt; gibi karakterleri &amp;lt; ve &amp;gt; haline getirir\n$safe_search = htmlspecialchars($search, ENT_QUOTES, 'UTF-8');\necho \"&lt;div&gt;Arama sonucu: \" . $safe_search . \"&lt;\/div&gt;\";\n?&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Bu kod \u00e7al\u0131\u015ft\u0131\u011f\u0131nda taray\u0131c\u0131 <code>&lt;script&gt;<\/code> etiketini bir kod blo\u011fu olarak \u00e7al\u0131\u015ft\u0131rmaz, ekranda d\u00fcz yaz\u0131 olarak g\u00f6r\u00fcnt\u00fcler.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Zafiyet Bar\u0131nd\u0131ran JavaScript (DOM) \u00d6rne\u011fi<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0130stemci taraf\u0131nda DOM g\u00fcncellenirken g\u00fcvensiz fonksiyonlar\u0131n kullan\u0131lmas\u0131 DOM XSS a\u00e7\u0131\u011f\u0131 yarat\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/\/ URL parametresini al\u0131p innerHTML ile ekrana yazan g\u00fcvensiz yap\u0131\nconst urlParams = new URLSearchParams(window.location.search);\nconst userName = urlParams.get('name');\ndocument.getElementById('welcome-message').innerHTML = \"Ho\u015f geldin \" + userName;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">E\u011fer <code>name<\/code> parametresine zararl\u0131 bir HTML\/JS kodu ge\u00e7ilirse, <code>innerHTML<\/code> bu kodu yorumlar.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">G\u00fcvenli JavaScript DOM Kullan\u0131m\u0131<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Kullan\u0131c\u0131dan gelen veri do\u011frudan HTML yap\u0131s\u0131n\u0131 de\u011fi\u015ftirmeyecek \u015fekilde atanmal\u0131d\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>const urlParams = new URLSearchParams(window.location.search);\nconst userName = urlParams.get('name');\n\/\/ textContent veriyi salt metin olarak i\u015fler, kod y\u00fcr\u00fct\u00fclmesini engeller\ndocument.getElementById('welcome-message').textContent = \"Ho\u015f geldin \" + userName;<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">XSS Sald\u0131r\u0131lar\u0131ndan Korunma Y\u00f6ntemleri<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">XSS a\u00e7\u0131klar\u0131n\u0131 tamamen engellemek tek bir y\u00f6nteme dayanmaz, katmanl\u0131 bir savunma yakla\u015f\u0131m\u0131 gerektirir.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Girdi Do\u011frulama (Input Validation): Sisteme giren t\u00fcm kullan\u0131c\u0131 verileri belirli kurallara g\u00f6re (t\u00fcr, uzunluk, format) do\u011frulanmal\u0131d\u0131r. Beklenmeyen formatlar do\u011frudan reddedilmelidir.<\/li>\n\n<li>\u00c7\u0131kt\u0131 Kodlama (Output Encoding \/ Escaping): Verinin taray\u0131c\u0131ya bas\u0131ld\u0131\u011f\u0131 ba\u011flama (HTML g\u00f6vdesi, HTML niteli\u011fi, JavaScript de\u011fi\u015fkeni, CSS) uygun kodlama yap\u0131lmal\u0131d\u0131r.<\/li>\n\n<li>G\u00fcvenli Fonksiyonlar\u0131n Tercihi: JavaScript taraf\u0131nda <code>innerHTML<\/code>, <code>outerHTML<\/code> veya <code>document.write<\/code> yerine <code>textContent<\/code> ve <code>innerText<\/code> tercih edilmelidir.<\/li>\n\n<li>Content Security Policy (CSP): Sunucu taraf\u0131ndan g\u00f6nderilen HTTP ba\u015fl\u0131klar\u0131yla taray\u0131c\u0131n\u0131n hangi kaynaklardan betik y\u00fckleyebilece\u011fi kat\u0131 kurallarla s\u0131n\u0131rland\u0131r\u0131lmal\u0131d\u0131r.<\/li>\n\n<li>HttpOnly Bayra\u011f\u0131 Kullan\u0131m\u0131: Oturum \u00e7erezlerine (session cookies) <code>HttpOnly<\/code> \u00f6zelli\u011fi tan\u0131mlanmal\u0131d\u0131r. Bu sayede taray\u0131c\u0131da bir XSS \u00e7al\u0131\u015fsa dahi JavaScript <code>document.cookie<\/code> \u00fczerinden oturum anahtar\u0131na eri\u015femez.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u00d6zet ve Sonraki Ad\u0131mlar<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">XSS, istemci taraf\u0131 kod \u00e7al\u0131\u015ft\u0131rma yetene\u011fi sunarak kullan\u0131c\u0131 oturumlar\u0131n\u0131n \u00e7al\u0131nmas\u0131na ve web sitelerinin manip\u00fcle edilmesine yol a\u00e7an kritik bir zafiyettir. Geli\u015ftiriciler, kullan\u0131c\u0131 girdilerine asla g\u00fcvenmemeli, girdi do\u011frulama ve ba\u011flama duyarl\u0131 \u00e7\u0131kt\u0131 kodlama kurallar\u0131n\u0131 yaz\u0131l\u0131m s\u00fcre\u00e7lerinin merkezine yerle\u015ftirmelidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sonraki ad\u0131m olarak, Content Security Policy (CSP) ba\u015fl\u0131klar\u0131n\u0131n nas\u0131l yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 inceleyebilir ve taray\u0131c\u0131 d\u00fczeyindeki g\u00fcvenlik mekanizmalar\u0131n\u0131 projelerinize entegre etmeye ba\u015flayabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web g\u00fcvenli\u011finin en kritik zafiyetlerinden biri olan XSS sald\u0131r\u0131lar\u0131n\u0131n mant\u0131\u011f\u0131n\u0131, \u00e7e\u015fitlerini ve yaz\u0131l\u0131m geli\u015ftiriciler i\u00e7in korunma yollar\u0131n\u0131 ele al\u0131yoruz.<\/p>","protected":false},"author":1,"featured_media":10266,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[229],"tags":[570,11,323,569,571],"class_list":["post-10265","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik","tag-cross-site-scripting","tag-siber-guvenlik","tag-web-guvenligi","tag-xss","tag-yazilim-guvenligi"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN<\/title>\n<meta name=\"description\" content=\"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.yunuskaytan.com\/en\/yk\/xss-cross-site-scripting-nedir\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN\" \/>\n<meta property=\"og:description\" content=\"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.yunuskaytan.com\/en\/yk\/xss-cross-site-scripting-nedir\/\" \/>\n<meta property=\"og:site_name\" content=\"Yunus KAYTAN\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-08T08:20:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"yunuskaytan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"yunuskaytan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/\"},\"author\":{\"name\":\"yunuskaytan\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/person\\\/be66986fb499da83a5685de34f68d15a\"},\"headline\":\"XSS (Cross-Site Scripting) Nedir?\",\"datePublished\":\"2026-11-08T08:20:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/\"},\"wordCount\":987,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/xss-cross-site-scripting-nedir-kapak.jpg\",\"keywords\":[\"cross site scripting\",\"siber g\u00fcvenlik\",\"web guvenligi\",\"xss\",\"yaz\u0131l\u0131m g\u00fcvenli\u011fi\"],\"articleSection\":[\"Siber G\u00fcvenlik\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/\",\"name\":\"XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/xss-cross-site-scripting-nedir-kapak.jpg\",\"datePublished\":\"2026-11-08T08:20:36+00:00\",\"description\":\"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/xss-cross-site-scripting-nedir-kapak.jpg\",\"contentUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/blog-kapak\\\/xss-cross-site-scripting-nedir-kapak.jpg\",\"width\":1200,\"height\":630,\"caption\":\"XSS (Cross-Site Scripting) Nedir?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/yk\\\/xss-cross-site-scripting-nedir\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"XSS (Cross-Site Scripting) Nedir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#website\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\",\"name\":\"Yunus KAYTAN\",\"description\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.yunuskaytan.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#organization\",\"name\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/cropped-BILISIM-VE-SIBER-GUVENLIK.png\",\"contentUrl\":\"https:\\\/\\\/www.yunuskaytan.com\\\/wp-content\\\/uploads\\\/2021\\\/07\\\/cropped-BILISIM-VE-SIBER-GUVENLIK.png\",\"width\":400,\"height\":109,\"caption\":\"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik\"},\"image\":{\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.yunuskaytan.com\\\/#\\\/schema\\\/person\\\/be66986fb499da83a5685de34f68d15a\",\"name\":\"yunuskaytan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g\",\"caption\":\"yunuskaytan\"},\"sameAs\":[\"http:\\\/\\\/www.yunuskaytan.com\"],\"url\":\"https:\\\/\\\/www.yunuskaytan.com\\\/en\\\/yk\\\/author\\\/yunuskaytan\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN","description":"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.yunuskaytan.com\/en\/yk\/xss-cross-site-scripting-nedir\/","og_locale":"en_US","og_type":"article","og_title":"XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN","og_description":"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.","og_url":"https:\/\/www.yunuskaytan.com\/en\/yk\/xss-cross-site-scripting-nedir\/","og_site_name":"Yunus KAYTAN","article_published_time":"2026-11-08T08:20:36+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg","type":"image\/jpeg"}],"author":"yunuskaytan","twitter_card":"summary_large_image","twitter_misc":{"Written by":"yunuskaytan","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#article","isPartOf":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/"},"author":{"name":"yunuskaytan","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/person\/be66986fb499da83a5685de34f68d15a"},"headline":"XSS (Cross-Site Scripting) Nedir?","datePublished":"2026-11-08T08:20:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/"},"wordCount":987,"commentCount":0,"publisher":{"@id":"https:\/\/www.yunuskaytan.com\/#organization"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg","keywords":["cross site scripting","siber g\u00fcvenlik","web guvenligi","xss","yaz\u0131l\u0131m g\u00fcvenli\u011fi"],"articleSection":["Siber G\u00fcvenlik"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/","url":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/","name":"XSS (Cross-Site Scripting) Nedir? - Yunus KAYTAN","isPartOf":{"@id":"https:\/\/www.yunuskaytan.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#primaryimage"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg","datePublished":"2026-11-08T08:20:36+00:00","description":"XSS (Cross-Site Scripting) nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r ve t\u00fcrleri nelerdir? Web uygulamalar\u0131nda XSS a\u00e7\u0131klar\u0131n\u0131 anlama ve \u00f6nleme rehberi.","breadcrumb":{"@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#primaryimage","url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg","contentUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/blog-kapak\/xss-cross-site-scripting-nedir-kapak.jpg","width":1200,"height":630,"caption":"XSS (Cross-Site Scripting) Nedir?"},{"@type":"BreadcrumbList","@id":"https:\/\/www.yunuskaytan.com\/yk\/xss-cross-site-scripting-nedir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/www.yunuskaytan.com\/"},{"@type":"ListItem","position":2,"name":"XSS (Cross-Site Scripting) Nedir?"}]},{"@type":"WebSite","@id":"https:\/\/www.yunuskaytan.com\/#website","url":"https:\/\/www.yunuskaytan.com\/","name":"Yunus KAYTAN","description":"Information Technology, Cybersecurity, Cybercrimes and Social Engineering","publisher":{"@id":"https:\/\/www.yunuskaytan.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.yunuskaytan.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.yunuskaytan.com\/#organization","name":"Information Technology, Cybersecurity, Cybercrimes and Social Engineering","url":"https:\/\/www.yunuskaytan.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/2021\/07\/cropped-BILISIM-VE-SIBER-GUVENLIK.png","contentUrl":"https:\/\/www.yunuskaytan.com\/wp-content\/uploads\/2021\/07\/cropped-BILISIM-VE-SIBER-GUVENLIK.png","width":400,"height":109,"caption":"Bili\u015fim, Siber G\u00fcvenlik, Siber Su\u00e7lar ve Sosyal M\u00fchendislik"},"image":{"@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.yunuskaytan.com\/#\/schema\/person\/be66986fb499da83a5685de34f68d15a","name":"yunuskaytan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3caae7a5e52b2c1df0cbbb777ba7b421ad4777ac947e9320b5809e2d454ffdb4?s=96&d=mm&r=g","caption":"yunuskaytan"},"sameAs":["http:\/\/www.yunuskaytan.com"],"url":"https:\/\/www.yunuskaytan.com\/en\/yk\/author\/yunuskaytan\/"}]}},"_links":{"self":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/comments?post=10265"}],"version-history":[{"count":1,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10265\/revisions"}],"predecessor-version":[{"id":10269,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/posts\/10265\/revisions\/10269"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/media\/10266"}],"wp:attachment":[{"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/media?parent=10265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/categories?post=10265"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yunuskaytan.com\/en\/wp-json\/wp\/v2\/tags?post=10265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}