4 ms·
HTML injection already is a term: https://www.owasp.org/index.php/HTML_Injection https://www.owasp.org/index.php/HTML_Injection Same principle, but different m
by vezzy-fnord 13y ago
HTML injection already is a term: https://www.owasp.org/index.php/HTML_Injection https://www.owasp.org/index.php/HTML_Injection
Same principle, but different method of exploitation. If we supply plain HTML tags in a vulnerable parameter, it's HTML injection. If we use JavaScript (via a script tag or whatnot), it's XSS.