Improvements in information security using the example of a web application for automatic class schedule generation

JavaScript is one of the programming languages used to create dynamic web applications. Due to its dynamic nature, it can often be a target for creating unwanted content on web pages. This paper presents the results of testing the Skedyul application, designed for automatic class schedule generation in schools. The study analyzes vulnerabilities of JavaScript as a scripting language and their impact on the security of web applications. JavaScript, being a key language for web programming, is frequently targeted in attacks due to its widespread use and inherent vulnerabilities. The paper identifies major types of JavaScript vulnerabilities, including XSS (Cross-Site Scripting) and CSRF (Cross-Site Request Forgery). Methods for protecting against these vulnerabilities are discussed, such as input sanitization, using secure libraries and frameworks, and regular software updates. The importance of security awareness and implementing best practices in web application development is emphasized to reduce the risk of attacks based on JavaScript vulnerabilities.