tait
/
tait.tech
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add example to xss vulnerabilities

Browse Source
master
Tait Hoyem 4 years ago
parent 99b4ad133d
commit a05dc82658
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File

1
_posts/2020-04-25-xss.md
Unescape View File

@ -72,6 +72,7 @@ but they would show up to a user as `<`.
When inputs are not properly sanitized *and* the input is shown to the user in another part of the website, When inputs are not properly sanitized *and* the input is shown to the user in another part of the website,
then a malicous user can type in HTML that will run whenever anybody tries to look at what they typed. then a malicous user can type in HTML that will run whenever anybody tries to look at what they typed.
For example: a name for a quiz website (input) and the leaderboard for said quiz (display).
HTML, by itself is not very dangerous. HTML, by itself is not very dangerous.
The worst thing you could do is probably put a link on your name, The worst thing you could do is probably put a link on your name,

Write Preview
Loading…
Cancel
Save