Evi Damanik
Computer Engineering, Faculty of Information Technology, Batam Institute of Technology, Batam, 29425, Indonesia

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

Comparative Analysis of Cross-Site Scripting (XSS) Vulnerabilities in Monolith and Microservices Architectures Evi Damanik
Journal of Intelligent Computing, Systems, and Applications (JICSA) Vol. 1 No. 02 (2026): March 2026
Publisher : Penerbit Institut Teknologi Del

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.54074/jicsa.v1i02.14

Abstract

This study presents a comparative analysis of Cross-Site Scripting (XSS) vulnerabilities between monolithic and microservices web application architectures. Both applications were developed using Python Flask inside an isolated Docker environment and implemented with identical functionality. Security testing was conducted using automated scanning with OWASP ZAP on both architectures. The results show that Reflected XSS and Server-Side Template Injection (SSTI) vulnerabilities were detected in both architectures, with identical payloads successfully executed. These findings indicate that architectural separation alone does not automatically eliminate source-code-level vulnerabilities such as XSS. Security implementations must be consistently applied across all service layers to prevent data contamination and maintain trust boundaries between services.