From c275ac486f273c042be2933ae11da8fecb8f2ad5 Mon Sep 17 00:00:00 2001 From: "xuanyi.wang" Date: Thu, 25 May 2023 17:58:04 +0200 Subject: [PATCH] Update page 'OWASP test - Sloetjes' --- OWASP test - Sloetjes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md index bee2d10..111a609 100644 --- a/OWASP test - Sloetjes.md +++ b/OWASP test - Sloetjes.md @@ -121,7 +121,7 @@ > Having an administrative front-end allows for a more controlled and secure way to interact with the database. It can provide user-friendly interfaces, limit the execution of potentially harmful commands, log activities for audit purposes, and manage access controls. * How could you tell if a XPath query you found is vulnerable to an injection attack? -> XPath Injection vulnerabilities typically occur when a web site uses user-supplied information to construct an XPath query for XML data. If you can provide input that changes the structure of the query itself, or see that user input is inserted into queries without being sanitized, then the XPath query is likely vulnerable to an injection attack. +> XPath Injection vulnerabilities typically occur when a web site uses user-supplied information to construct an XPath query for XML data. If we can provide input that changes the structure of the query itself, or see that user input is inserted into queries without being sanitized, then the XPath query is likely vulnerable to an injection attack. * What is a HTML entity? > An HTML entity is a piece of text ("string") that begins with an ampersand (&) and ends with a semicolon (;). Entities are used to represent reserved characters in HTML that can't be used as they may be confused with HTML markup.