olemus
skriptisüstil ja HTTP-meetodil TRACE või TRACK põhinev veebirünne autentimisandmete ja muu konfidentsiaalse teabe hankimiseks

üksikasju
https://www.owasp.org/index.php/Cross_Site_Tracing

http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf

https://www.youtube.com/watch?v=FSBxzXjOUTA

https://deadliestwebattacks.com/2010/05/18/cross-site-tracing-xst-the-misunderstood-vulnerability/

tõrje
https://www.sans.org/reading-room/whitepapers/malicious/cross-site-tracing-protecting-businesses-simple-attack-1140

http://www.computerweekly.com/tip/How-to-prevent-a-cross-site-tracing-vulnerability-exploit

http://opensourceforu.com/2010/12/securing-apache-part-4-xst-xshm/