As far as I know escape characters are characters which change the meaning of the following character. In HTML for example the
& is an escape character that declares the beginning of an entity reference. What is an entity? Well... isn't this a combination of characters used to represent special characters. In HTML for example
&ln is used to represent
Now, as I am new to the subject of computer security, can anybody help me in finding an attack that exploits these escape characters? I realize I have mentioned HMTL a lot. So there must be an exploit of HTML code that targets escape sequences. And I have heard the same is true for SQL. I don't know any particular escape sequences for SQL - is SQL injection considered an attack that makes use of escape characters? I mean SQL injection often targets the single quote.