View source for Test Client Side SQL Injection

{{Template:OWASP Testing Guide v4}}

== Brief Summary ==
aaa.

== Description of the Issue == 
aa


The following script 

<pre>
aa
</pre>

== Black Box testing and example ==
Blackbox testing for  HTML Injection is not usually performed since access to the source code is always available as it needs to be sent to the client to be executed.<br>

== Gray Box testing and example == 
'''Testing for HTML Injection vulnerabilities:'''<br>
For example, looking at the following URL:
aa

aa

<pre>
<script>
aa
</pre>

aa.

== References ==
'''OWASP Resources'''
* [[DOM based XSS Prevention Cheat Sheet]]
* DOMXSS.com - http://www.domxss.com
'''Whitepapers'''<br>
* Browser location/document URI/URL Sources - https://code.google.com/p/domxsswiki/wiki/LocationSources
** i.e., what is returned when you ask the browser for things like document.URL, document.baseURI, location, location.href, etc.