olemus
veebirünne autentimisandmete ja
muu konfidentsiaalse teabe hankimiseks,
põhineb skriptisüstil ja
HTTP-meetodil TRACE või TRACK

ülevaateid
https://www.owasp.org/index.php/Cross_Site_Tracing

http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf

https://capec.mitre.org/data/definitions/107.html

https://www.youtube.com/watch?v=FSBxzXjOUTA

https://deadliestwebattacks.com/2010/05/18/cross-site-tracing-xst-the-misunderstood-vulnerability/

tõrje
http://www.computerweekly.com/tip/How-to-prevent-a-cross-site-tracing-vulnerability-exploit

https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.641.2954&rep=rep1&type=pdf

http://opensourceforu.com/2010/12/securing-apache-part-4-xst-xshm/