Protection SWA

Question

Hi,
I’ve developed an azure swa in which I store some data in localStorage. I’d like to protect it against XSS attack and others. What would be the best service to use in front of my web app ?
Thanks

Answer 1

Hello @Dyt13

Thanks for reaching Q&A platform.

Azure WAF protects against the XSS attacks. The following documents explain about the protection:

https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules?tabs=owasp32#owasp-crs-32

Now, the WAF could be integrated with two services:

Azure Application Gateway with WAF: https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview
Azure Frontdoor with WAF: https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/afds-overview?source=recommendations

Now Azure Application Gateway is a regional service, and Frontdoor is a Global Service. You must investigate the Web App should be placed behind which service based on the application nature and the requirement, the below document help you choose the service:

https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

Hope this answer helps.

Regards,
Priya Kumar