# Cross-site scripting (XSS)

* [Reflected XSS into HTML context with nothing encoded](cross-site-scripting-xss/reflected-xss-into-html-context-with-nothing-encoded)
* [Stored XSS into HTML context with nothing encoded](cross-site-scripting-xss/stored-xss-into-html-context-with-nothing-encoded)
* [DOM XSS in document.write sink using source location.search](cross-site-scripting-xss/dom-xss-in-document.write-sink-using-source-location.search)
* [DOM XSS in innerHTML sink using source location.search](cross-site-scripting-xss/dom-xss-in-innerhtml-sink-using-source-location.search)
* [DOM XSS in jQuery anchor href attribute sink using location.search source](cross-site-scripting-xss/dom-xss-in-jquery-anchor-href-attribute-sink-using-location.search-source)
* DOM XSS in jQuery selector sink using a hashchange event
* [Reflected XSS into attribute with angle brackets HTML-encoded](cross-site-scripting-xss/reflected-xss-into-attribute-with-angle-brackets-html-encoded)
* [Stored XSS into anchor href attribute with double quotes HTML-encoded](cross-site-scripting-xss/stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded)
