Detail CAPEC-245

CAPEC-245

XSS Using Doubled Characters
2014-06-23
00h00 +00:00
Sedang
Draft
2022-02-22
00h00 +00:00
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Kelola notifikasi

Deskripsi CAPEC

The adversary bypasses input validation by using doubled characters in order to perform a cross-site scripting attack. Some filters fail to recognize dangerous sequences if they are preceded by repeated characters. For example, by doubling the < before a script command, (<