description Attacks on the browser, often involving the victim landing on an attacker's site Client-Side