Understanding Script Injection Attacks: ASP Alliance

ASP.NET Tutorials » Understanding Script Injection Attacks

Not Logged In. Login

AspAlliance
Register
Edit My Profile
Author List
Write for Us
About AspAlliance
Contact Us
Privacy Policy
Link To Us
Advertise

Subscribe
Free Newsletter
Newsletter Archive
RSS Syndication

Print Add To Favorites Email To Friend Rate This Article
Understanding Script Injection Attacks

page 2 of 5

by SANJIT SIL
Feedback

Average Rating:

Views (Total / Last 10 Days): 12014/ 151

Article Contents:

The following commonly used HTML tags (not an exhaustive list), could allow a malicious user to inject script code:

<applet> 
<body> 
<embed> 
<frame> 
<script> 
<frameset> 
<html> 
<iframe> 
<img> 
<style> 
<layer> 
<link> 
<ilayer> 
<meta> 
<object>

An attacker can use HTML attributes such as src, lowsrc, style, and href in conjunction with the preceding tags to inject cross-site scripting.

User Comments

No comments posted yet.

Product Spotlight

Learn More

Latest Resources
» Cheap SQL 2008 Hosting & BEST Windows 2008 Hosting
» YUI Asp.Net Button
» YUI Asp.Net ColorPicker
» YUI Asp.Net Slider
» YUI Asp.Net Calendar

Community Advice: ASP | SQL | XML | Regular Expressions | Windows