Stack Exchange Network
Stack Exchange network consists of 181 Q&A communities including
Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Visit Stack Exchange
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
The best answers are voted up and rise to the top
1 year, 7 months ago
As far as I know,
Could there in theory be any vulnerabilities in the HTML parser or something similar?
Have there been any exploits in this area before?
How realistic is it getting infected by viewing page source of a malicious website?
The theory kinda says it should be impossible, but I'm looking forward for other opinions.
65.1k 24 24 gold badges 181 181 silver badges 218 218 bronze badges
Oct 30, 2021 at 13:39
Sir Muffington Sir Muffington
1,552 2 2 gold badges 13 13 silver badges 24 24 bronze badges
When viewing the page source, the browser renders the html code without interpretation, that means the scripts that are either embedded or called using the
<script/> tag are not executed by the browser.
Any possible risk from displaying the code source would be brought by the browser (could be a bug or vulnerability) not the malicious page itself.
Oct 30, 2021 at 18:54
1,822 2 2 gold badges 18 18 silver badges 55 55 bronze badges
log in to answer this question.
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our
Accept all cookies
Necessary cookies only