CAPEC-245 상세 정보

CAPEC-245

XSS Using Doubled Characters
2014-06-23
00h00 +00:00
보통
Draft
2022-02-22
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CAPEC 설명

The adversary bypasses input validation by using doubled characters in order to perform a cross-site scripting attack. Some filters fail to recognize dangerous sequences if they are preceded by repeated characters. For example, by doubling the < before a script command, (<