Injection

5 guides tagged “Injection”.

  1. Input Validation vs Escaping vs Sanitization: What's the Difference? Validation, escaping, and sanitization are three different defenses used against injection. Learn which one to use, where, and why mixing them causes bugs. Information Security intermediate 8 min
  2. What Is Prototype Pollution? Prototype pollution lets an attacker set properties on every object in a JavaScript app. Learn how deep-merge code enables it and how to prevent it. Information Security intermediate 7 min
  3. What Is Cross-Site Scripting (XSS)? XSS lets attacker-controlled JavaScript run in another user's browser. Learn the three types, why AI-generated React still ships it, and how to prevent it. Information Security beginner 8 min
  4. What Is XXE (XML External Entity Injection)? XML parsers can be told to fetch external resources. XXE abuses that to read local files, probe internal networks, and in some configurations cause denial of service. Information Security intermediate 6 min
  5. What Is Server-Side Template Injection (SSTI)? Template injection happens when user input is rendered as template code rather than as data, letting an attacker run expressions and often reach remote code execution. Information Security advanced 6 min