Web Security for Developers

6INJECTION ATTACKS

Now that you have a solid grasp of how the internet works, let’s focus on specific vulnerabilities and the methods hackers use to exploit them. This chapter covers injection attacks, which occur when the attacker injects external code into an application in an effort to take control of the application or read sensitive data.

Recall that the internet is an example of a client-server architecture, meaning that a web server handles connections from many clients at once. Most clients are web browsers, responsible for generating HTTP requests to the web server as a user navigates the website. The web server returns HTTP responses ...