SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:58:04 +02:00
parent 4772d12853
commit c275ac486f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test - Sloetjes.md
+1 -1
@@ -121,7 +121,7 @@
> Having an administrative front-end allows for a more controlled and secure way to interact with the database. It can provide user-friendly interfaces, limit the execution of potentially harmful commands, log activities for audit purposes, and manage access controls.
* How could you tell if a XPath query you found is vulnerable to an injection attack?
> XPath Injection vulnerabilities typically occur when a web site uses user-supplied information to construct an XPath query for XML data. If you can provide input that changes the structure of the query itself, or see that user input is inserted into queries without being sanitized, then the XPath query is likely vulnerable to an injection attack.
> XPath Injection vulnerabilities typically occur when a web site uses user-supplied information to construct an XPath query for XML data. If we can provide input that changes the structure of the query itself, or see that user input is inserted into queries without being sanitized, then the XPath query is likely vulnerable to an injection attack.
* What is a HTML entity?
> An HTML entity is a piece of text ("string") that begins with an ampersand (&) and ends with a semicolon (;). Entities are used to represent reserved characters in HTML that can't be used as they may be confused with HTML markup.