diff options
| author | Marcin Zelent <zelent.marcin@gmail.com> | 2018-05-22 15:58:05 +0200 |
|---|---|---|
| committer | Marcin Zelent <zelent.marcin@gmail.com> | 2018-05-22 15:58:05 +0200 |
| commit | d0dc8c77f1a587d47c44edbf34a272795a1d6f91 (patch) | |
| tree | a39aa18c87af216a391650195c8c0ca7a38e7f4f | |
| parent | 65bf11effbb6dd85e8fb6824699742142e0b1d65 (diff) | |
Described XSS
| -rw-r--r-- | synopsis.tex | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/synopsis.tex b/synopsis.tex index df4fd2a..6355f55 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -422,6 +422,49 @@ This way, if an attacker will send \texttt{login' OR '1'='1} to the application, it will not cause any harm, because the query would literally try to find a user with name \texttt{login' OR '1'='1}. +\subsection{Cross-Site Scripting (XSS)} + +\subsubsection{How it works} + +Cross-Site Scripting is closely related to injection as it works by injecting a |