Mmeucci: Created page with "{{Template:OWASP Testing Guide v4}} == Brief Summary == aaa. == Description of the Issue == aa The following script

aa

== Black Box testing and example ==..."

2013-12-14T18:03:47Z

Created page with "{{Template:OWASP Testing Guide v4}} == Brief Summary == aaa. == Description of the Issue == aa The following script <pre> aa </pre> == Black Box testing and example ==..."

New page

{{Template:OWASP Testing Guide v4}}

== Brief Summary ==
aaa.

== Description of the Issue ==
aa

The following script

<pre>
aa
</pre>

== Black Box testing and example ==
Blackbox testing for HTML Injection is not usually performed since access to the source code is always available as it needs to be sent to the client to be executed.<br>

== Gray Box testing and example ==
'''Testing for HTML Injection vulnerabilities:'''<br>
For example, looking at the following URL:
aa

aa

<pre>
<script>
aa
</pre>

aa.

== References ==
'''OWASP Resources'''
* [[DOM based XSS Prevention Cheat Sheet]]
* DOMXSS.com - http://www.domxss.com
'''Whitepapers'''<br>
* Browser location/document URI/URL Sources - https://code.google.com/p/domxsswiki/wiki/LocationSources
** i.e., what is returned when you ask the browser for things like document.URL, document.baseURI, location, location.href, etc.

Test Client Side SQL Injection - Revision history

Mmeucci: Created page with "{{Template:OWASP Testing Guide v4}} == Brief Summary == aaa. == Description of the Issue == aa The following script aa == Black Box testing and example ==..."

Mmeucci: Created page with "{{Template:OWASP Testing Guide v4}} == Brief Summary == aaa. == Description of the Issue == aa The following script
aa
== Black Box testing and example ==..."