{"id":149,"date":"2025-07-09T10:04:59","date_gmt":"2025-07-09T10:04:59","guid":{"rendered":"https:\/\/www.mucahitakin.com\/blog\/?p=149"},"modified":"2025-07-09T10:06:19","modified_gmt":"2025-07-09T10:06:19","slug":"web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak","status":"publish","type":"post","link":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/","title":{"rendered":"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak"},"content":{"rendered":"\n<p>Web uygulamalar\u0131n\u0131n kullan\u0131c\u0131larla etkile\u015fimi artt\u0131k\u00e7a, g\u00fcvenlik a\u00e7\u0131klar\u0131 da ka\u00e7\u0131n\u0131lmaz hale geliyor. Bu a\u00e7\u0131klar\u0131n en yayg\u0131n ve tehlikeli olanlar\u0131ndan biri&nbsp;<strong>XSS (Cross-site Scripting)<\/strong>&nbsp;zafiyetidir. Bu yaz\u0131da, kendi sitem olan&nbsp;<strong>mucahitakin.com<\/strong>&nbsp;\u00fczerinden \u00f6rneklerle XSS a\u00e7\u0131klar\u0131n\u0131 nas\u0131l tespit edebilece\u011fimizi, nas\u0131l istismar edildi\u011fini ve nas\u0131l korunabilece\u011fimizi detayl\u0131ca ele alaca\u011f\u0131m.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>XSS Nedir?<\/strong><\/h3>\n\n\n\n<p><strong>XSS<\/strong>, k\u00f6t\u00fc niyetli kullan\u0131c\u0131lar\u0131n web sayfalar\u0131na zararl\u0131 JavaScript kodlar\u0131 enjekte ederek di\u011fer kullan\u0131c\u0131lar\u0131n taray\u0131c\u0131lar\u0131nda bu kodlar\u0131n \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flamas\u0131d\u0131r. Bu sayede kullan\u0131c\u0131lar\u0131n \u00e7erez bilgileri, oturum verileri ya da form girdileri gibi hassas bilgileri \u00e7al\u0131nabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>XSS T\u00fcrleri<\/strong><\/h3>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Stored XSS (Kal\u0131c\u0131 XSS)<\/strong>: K\u00f6t\u00fc ama\u00e7l\u0131 kod, veritaban\u0131na kaydedilir ve her sayfa y\u00fcklendi\u011finde tekrar \u00e7al\u0131\u015f\u0131r.<\/li>\n\n\n\n<li><strong>Reflected XSS (Yans\u0131t\u0131lan XSS)<\/strong>: Kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131na URL \u00fczerinden g\u00f6nderilen k\u00f6t\u00fc ama\u00e7l\u0131 kod, do\u011frudan yan\u0131t\u0131n i\u00e7inde yans\u0131t\u0131l\u0131r.<\/li>\n\n\n\n<li><strong>DOM-based XSS<\/strong>: JavaScript taraf\u0131nda, DOM manip\u00fclasyonuyla ortaya \u00e7\u0131kan a\u00e7\u0131klard\u0131r.<\/li>\n<\/ol>\n\n\n\n<p><strong>Senaryo:<\/strong><\/p>\n\n\n\n<p>mucahitakin.com \u00fczerinde basit bir yorum formu oldu\u011funu varsayal\u0131m:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;form method=\"POST\" action=\"\/yorum-gonder\"&gt;\n  &lt;input type=\"text\" name=\"ad\" placeholder=\"Ad\u0131n\u0131z\"&gt;\n  &lt;textarea name=\"yorum\" placeholder=\"Yorumunuzu yaz\u0131n\"&gt;&lt;\/textarea&gt;\n  &lt;button type=\"submit\"&gt;G\u00f6nder&lt;\/button&gt;\n&lt;\/form&gt;<\/code><\/pre>\n\n\n\n<p>Ve bu yorumlar a\u015fa\u011f\u0131daki gibi sayfaya yans\u0131t\u0131l\u0131yor:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;p&gt;&lt;strong&gt;Ad:&lt;\/strong&gt; &lt;?= $_POST&#91;'ad'] ?&gt;&lt;\/p&gt;\n&lt;p&gt;&lt;strong&gt;Yorum:&lt;\/strong&gt; &lt;?= $_POST&#91;'yorum'] ?&gt;&lt;\/p&gt;<\/code><\/pre>\n\n\n\n<p>Bu durumda kullan\u0131c\u0131,&nbsp;yorum&nbsp;k\u0131sm\u0131na a\u015fa\u011f\u0131daki gibi bir payload g\u00f6nderirse:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;script&gt;alert('XSS Testi - mucahitakin.com');&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p>Yorum eklendi\u011finde bu script do\u011frudan \u00e7al\u0131\u015facakt\u0131r. \u0130\u015fte bu, klasik bir&nbsp;<strong>Stored XSS<\/strong>&nbsp;zafiyetidir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>XSS A\u00e7\u0131\u011f\u0131 Nas\u0131l Tespit Edilir?<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1. Basit Payload Denemeleri<\/strong><\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;script&gt;alert(1)&lt;\/script&gt;\n&lt;img src=x onerror=alert(2)&gt;\n\"&gt;&lt;script&gt;alert(3)&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p>Yukar\u0131daki payload\u2019lar form alanlar\u0131na yaz\u0131larak veya URL parametrelerine eklenerek test edilebilir.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Otomatik Ara\u00e7larla Tespit<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Burp Suite<\/strong>: Web trafi\u011fini analiz ederek otomatik XSS taramalar\u0131 yap\u0131labilir.<\/li>\n\n\n\n<li><strong>OWASP ZAP<\/strong>: A\u00e7\u0131k kaynakl\u0131 bir g\u00fcvenlik taray\u0131c\u0131d\u0131r.<\/li>\n\n\n\n<li><strong>XSStrike<\/strong>: XSS a\u00e7\u0131\u011f\u0131 tespiti i\u00e7in \u00f6zelle\u015fmi\u015f bir ara\u00e7t\u0131r.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Korunma Y\u00f6ntemleri<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>HTML Encode Etme (Escaping)<\/strong><\/h4>\n\n\n\n<p>PHP\u2019de&nbsp;htmlspecialchars()&nbsp;kullan\u0131larak \u00f6zel karakterler kodlanmal\u0131d\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;?= htmlspecialchars($_POST&#91;'yorum'], ENT_QUOTES, 'UTF-8'); ?&gt;<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Content Security Policy (CSP)<\/strong><\/h4>\n\n\n\n<p>Taray\u0131c\u0131lar\u0131n yaln\u0131zca izin verilen kaynaklardan gelen scriptleri \u00e7al\u0131\u015ft\u0131rmas\u0131n\u0131 sa\u011flayan bir HTTP ba\u015fl\u0131\u011f\u0131d\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Content-Security-Policy: script-src 'self'<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Giri\u015f Do\u011frulama (Input Validation)<\/strong><\/h4>\n\n\n\n<p>Formlara gelen verilerin uzunlu\u011fu, format\u0131 ve t\u00fcr\u00fc kontrol edilmelidir.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>WAF Kullan\u0131m\u0131 (Web Application Firewall)<\/strong><\/h4>\n\n\n\n<p>ModSecurity gibi uygulama g\u00fcvenlik duvarlar\u0131 XSS gibi sald\u0131r\u0131lar\u0131 \u00f6nceden engelleyebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Ger\u00e7ek Hayattan Tehlikeli XSS \u00d6rnekleri<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Facebook\u2019ta bir zamanlar XSS ile kullan\u0131c\u0131 oturum bilgileri \u00e7al\u0131n\u0131p sahte uygulamalara y\u00f6nlendirme yap\u0131labiliyordu.<\/li>\n\n\n\n<li><strong>PayPal<\/strong>, 2019\u2019da bir Reflected XSS a\u00e7\u0131\u011f\u0131 nedeniyle 10.000$ \u00f6d\u00fcl vermi\u015fti.<\/li>\n<\/ul>\n\n\n\n<p>E\u011fer bir geli\u015ftiriciyseniz veya bir web sitesinin sahibiyse \u2014 \u00f6rne\u011fin&nbsp;<strong>mucahitakin.com<\/strong>&nbsp;gibi \u2014 XSS a\u00e7\u0131kl\u0131klar\u0131 sizin i\u00e7in ger\u00e7ek bir tehdit olabilir. Gerekli testleri d\u00fczenli olarak yapmak, input verilerini do\u011fru \u015fekilde filtrelemek ve kullan\u0131c\u0131dan gelen veriye hi\u00e7bir zaman %100 g\u00fcvenmemek gerekir.<\/p>\n\n\n\n<p>XSS a\u00e7\u0131kl\u0131\u011f\u0131 k\u00fc\u00e7\u00fck gibi g\u00f6r\u00fcnse de sonu\u00e7lar\u0131 ciddi olabilir: kullan\u0131c\u0131 verilerinin \u00e7al\u0131nmas\u0131, oturumun ele ge\u00e7irilmesi, y\u00f6nlendirme sald\u0131r\u0131lar\u0131 ve daha fazlas\u0131\u2026<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Kendi Sitenizi Test Ederken Dikkat Etmeniz Gerekenler<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Testleri yaln\u0131zca kendi ortam\u0131n\u0131zda (localhost ya da staging) yap\u0131n.<\/li>\n\n\n\n<li>Zarars\u0131z payload\u2019lar kullan\u0131n:\u00a0alert(1),\u00a0console.log(&#8220;test&#8221;)\u00a0gibi.<\/li>\n\n\n\n<li>\u00dc\u00e7\u00fcnc\u00fc parti script dosyalar\u0131n\u0131 test ortam\u0131nda ge\u00e7ici olarak engelleyin.<\/li>\n<\/ul>\n\n\n\n<p><strong>Unutmay\u0131n:<\/strong>&nbsp;G\u00fcvenlik, bir seferlik de\u011fil, s\u00fcrekli bir s\u00fcre\u00e7tir.<\/p>\n\n\n\n<p><strong><em>Kaynak\u00e7a<\/em><\/strong> : <strong><a style=\"font-size:12px;\" rel=\"nofollow noopener\" href=\"https:\/\/github.com\/grealyve\/MDISec-Web-Security-and-Hacking-Notes\/blob\/main\/Notlar\/0x08%7CXSS_G\u00fcvenlik_Zafiyeti_Hakk\u0131nda_Her_\u015eey_Part-1.md\"><em>https:\/\/github.com\/grealyve\/MDISec-Web-Security-and-Hacking-Notes\/blob\/main\/Notlar\/0x08%7CXSS_G\u00fcvenlik_Zafiyeti_Hakk\u0131nda_Her_\u015eey_Part-1.md<\/em><\/a><\/strong><\/p>\n\n\n\n<p><strong><em>Kaynak\u00e7a<\/em><\/strong> : <strong><em><a rel=\"nofollow noreferrer\" style=\"font-size:12px;\" href=\"https:\/\/portswigger.net\/web-security\/cross-site-scripting\">https:\/\/portswigger.net\/web-security\/cross-site-scripting<\/a><\/em><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web uygulamalar\u0131n\u0131n kullan\u0131c\u0131larla etkile\u015fimi artt\u0131k\u00e7a, g\u00fcvenlik a\u00e7\u0131klar\u0131 da ka\u00e7\u0131n\u0131lmaz hale geliyor. Bu a\u00e7\u0131klar\u0131n en yayg\u0131n ve tehlikeli olanlar\u0131ndan biri&nbsp;XSS (Cross-site Scripting)&nbsp;zafiyetidir. Bu yaz\u0131da, kendi sitem olan&nbsp;mucahitakin.com&nbsp;\u00fczerinden \u00f6rneklerle XSS a\u00e7\u0131klar\u0131n\u0131 nas\u0131l tespit edebilece\u011fimizi, nas\u0131l istismar edildi\u011fini ve nas\u0131l korunabilece\u011fimizi detayl\u0131ca ele alaca\u011f\u0131m. XSS Nedir? XSS, k\u00f6t\u00fc niyetli kullan\u0131c\u0131lar\u0131n web sayfalar\u0131na zararl\u0131 JavaScript kodlar\u0131 enjekte ederek di\u011fer [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":152,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[108],"tags":[116,111,113,114,115,109,110,112],"class_list":["post-149","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web-guvenligi","tag-alert1","tag-cross-site-scripting","tag-dom-based-xss","tag-reflected-xss","tag-stored-xss","tag-web-guvenligi","tag-xss","tag-xss-turleri"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin<\/title>\n<meta name=\"description\" content=\"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin\" \/>\n<meta property=\"og:description\" content=\"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/\" \/>\n<meta property=\"og:site_name\" content=\"Mucahit Akin\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-09T10:04:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-09T10:06:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mucahitakin.com\/blog\/wp-content\/uploads\/2025\/07\/xss-min-1-1024x938.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"938\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Mucahit Akin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mucahit Akin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/\",\"url\":\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/\",\"name\":\"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin\",\"isPartOf\":{\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/#website\"},\"datePublished\":\"2025-07-09T10:04:59+00:00\",\"dateModified\":\"2025-07-09T10:06:19+00:00\",\"author\":{\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/b9afcbf2f9b8279516ed7d93361c751b\"},\"description\":\"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.mucahitakin.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/#website\",\"url\":\"https:\/\/www.mucahitakin.com\/blog\/\",\"name\":\"Mucahit Akin\",\"description\":\"Developer\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mucahitakin.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/b9afcbf2f9b8279516ed7d93361c751b\",\"name\":\"Mucahit Akin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d73f6416cb16f0abe000533f648d6f824e3d9e0d73d0c686c8196cf8bcfa9957?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d73f6416cb16f0abe000533f648d6f824e3d9e0d73d0c686c8196cf8bcfa9957?s=96&d=mm&r=g\",\"caption\":\"Mucahit Akin\"},\"sameAs\":[\"https:\/\/mucahitakin.com\"],\"url\":\"https:\/\/www.mucahitakin.com\/blog\/author\/akin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin","description":"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/","og_locale":"en_US","og_type":"article","og_title":"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin","og_description":"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.","og_url":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/","og_site_name":"Mucahit Akin","article_published_time":"2025-07-09T10:04:59+00:00","article_modified_time":"2025-07-09T10:06:19+00:00","og_image":[{"width":1024,"height":938,"url":"https:\/\/www.mucahitakin.com\/blog\/wp-content\/uploads\/2025\/07\/xss-min-1-1024x938.png","type":"image\/png"}],"author":"Mucahit Akin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mucahit Akin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/","url":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/","name":"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak - Mucahit Akin","isPartOf":{"@id":"https:\/\/www.mucahitakin.com\/blog\/#website"},"datePublished":"2025-07-09T10:04:59+00:00","dateModified":"2025-07-09T10:06:19+00:00","author":{"@id":"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/b9afcbf2f9b8279516ed7d93361c751b"},"description":"Bir yaz\u0131l\u0131m geli\u015ftircisi olarak ne kadar web g\u00fcvenli\u011fini bilmemiz gerekti\u011fini anlatt\u0131\u011f\u0131m bu seride Web G\u00fcvenli\u011fi XSS konusunu ele ald\u0131k.","breadcrumb":{"@id":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.mucahitakin.com\/blog\/web-guvenligi-xss-cross-site-scripting-zafiyetlerini-anlamak\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mucahitakin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Web G\u00fcvenli\u011fi XSS (Cross-site Scripting) Zafiyetlerini Anlamak"}]},{"@type":"WebSite","@id":"https:\/\/www.mucahitakin.com\/blog\/#website","url":"https:\/\/www.mucahitakin.com\/blog\/","name":"Mucahit Akin","description":"Developer","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mucahitakin.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/b9afcbf2f9b8279516ed7d93361c751b","name":"Mucahit Akin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mucahitakin.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d73f6416cb16f0abe000533f648d6f824e3d9e0d73d0c686c8196cf8bcfa9957?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d73f6416cb16f0abe000533f648d6f824e3d9e0d73d0c686c8196cf8bcfa9957?s=96&d=mm&r=g","caption":"Mucahit Akin"},"sameAs":["https:\/\/mucahitakin.com"],"url":"https:\/\/www.mucahitakin.com\/blog\/author\/akin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/posts\/149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/comments?post=149"}],"version-history":[{"count":1,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/posts\/149\/revisions"}],"predecessor-version":[{"id":151,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/posts\/149\/revisions\/151"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/media\/152"}],"wp:attachment":[{"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/media?parent=149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/categories?post=149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mucahitakin.com\/blog\/wp-json\/wp\/v2\/tags?post=149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}