HTML Injection Summary
- 1/ What are the different types of HTML injection?
- 2/
What are the common scenarios of HTML injection? - 3/ How to detect HTML injection?
- 4/ The vulnerable dependency of (Stored) HTML Injection (application, editor, sanitizer)?
- 5/
Bypass of current existing sanitizer?- Answered by Its Clobbering Time paper in Section 6.1
- 6/ Mechanism on defending HTML injection?
- Sanitization
- Isolation
- Related Works
- HTML Injection
- DOM Clobbering
- Evaluation
- Discussion
- Others