olemus
veebirünne autentimisandmete ja muu konfidentsiaalse teabe hankimiseks, põhineb skriptisüstil ja HTTP-meetodil TRACE või TRACK
= attack involving the use of cross-site scripting and the TRACE or TRACK HTTP methods

ülevaateid
https://en.wikipedia.org/wiki/Cross-site_tracing
https://owasp.org/www-community/attacks/Cross_Site_Tracing
http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
https://capec.mitre.org/data/definitions/107.html
https://www.youtube.com/watch?v=FSBxzXjOUTA
https://deadliestwebattacks.com/2010/05/18/cross-site-tracing-xst-the-misunderstood-vulnerability/
https://odsc.medium.com/how-is-cross-site-scripting-different-from-other-related-attacks-bcfd08e3e056

tõrje
https://zenconix.com/cross-site-tracing-and-its-prevention-xst/
http://opensourceforu.com/2010/12/securing-apache-part-4-xst-xshm/