Commit 51441561 authored by Philip Linghammar's avatar Philip Linghammar
Browse files

Updates html-injection.md 

Auto commit by GitBook Editor
parent e1ae1075

html-injection.md

+7 −6
Original line number Diff line number Diff line
@@ -11,15 +11,16 @@ What we can do: 


Javascript can be injected into html-tags, which can be used to steal cookies and other things.



### Injecting HTML



The attacker can inject html forms that tricks the user into giving up sensitive data.



See eventhandlers for more ways: https://www.owasp.org/index.php/XSS\_Filter\_Evasion\_Cheat\_Sheet\#Event\_Handlers



```

<IMG SRC=# onmouseover="alert('xxs')">







### Injecting HTML



The attacker can inject html forms that tricks the user into giving up sensitive data.

```