The client controls all the headers (including cookies) too. So if they are displayed anywhere without being escaped, the page is vulnerable to content injection.
The DOM is also controlled by the client too, so anything in that can be manipulated with injections.
The DOM is also controlled by the client too, so anything in that can be manipulated with injections.
No comments:
Post a Comment