Paul's Weblog • 1/24/2019

Cross-site Scripting </script> Vulnerability

Read Original

This technical article details a Cross-Site Scripting (XSS) vulnerability that occurs when embedding JSON data directly within HTML <script> tags. It explains how a closing </script> sequence within the data can break the script block and allow arbitrary code execution. The solution provided is to escape the '<' character to \u003c to prevent the browser from prematurely closing the script tag.

0 comments
#JavaScript #json #dom
Cross-site Scripting </script> Vulnerability

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

1
The Beautiful Web
Jens Oliver Meiert • 2 votes
2
When your coding agent doesn’t understand your project, you’ll get junk
Benjamin Cane • 1 votes
3
LLM Use in the Python Source Code
Miguel Grinberg • 1 votes
4
Wagon’s algorithm in Python
John D. Cook • 1 votes
5
An example conversation with Claude Code
Dumm Zeuch • 1 votes