EXPLORE: How are feds approaching zero trust? XSS vs. Cross-Site Request Forgery A variation on the XSS approach, a cross-site request forgery attack forces an end user to execute unwanted actions.