Hunting Security Bugs

Chapter 10. HTML Scripting Attacks

In this chapter:
Understanding Reflected Cross-Site Scripting Attacks Against Servers
Understanding Persistent XSS Attacks Against Servers
Identifying Attackable Data for Reflected and Persistent XSS Attacks
Common Ways Programmers Try to Stop Attacks
Understanding Reflected XSS Attacks Against Local Files
Understanding Script Injection Attacks in the My Computer Zone
Ways Programmers Try to Prevent HTML Scripting Attacks
Understanding How Internet Explorer Mitigates XSS Attacks Against Local Files
Identifying HTML Scripting Vulnerabilities
Finding HTML Scripting Bugs Through Code Review
Summary

HTML isn’t used just on the Web: it is used for e-mail, Help files, and the graphical user interface (UI) of server and client ...