Questions tagged [html]
HTML (HyperText Markup Language) is a language used to create web pages using tags inline with the content to indicate to browsers how to display that content, using the tags to interpret formatting, images, scripts and other content.
350 questions
3 votes
1 answer
127 views
Is there an official, or accepted, recommendation to turn off autocomplete for bank account details
Part of the WCAG recommendations for web accessibility involves using autocomplete attributes to make it easier to fill in forms: see here, and here. However on multiple places I've seen people ...
- 131
3 votes
1 answer
805 views
Is there a way to guarantee that a static HTTP page is unchanged from when it was last reviewed
I'm making a simple web service that (skipping other details) allows a user to upload a message that can be retrieved by another user but can be decrypted only with a certain key. The message is ...
- 35
4 votes
2 answers
4k views
Why should an attacker perform a clickjacking attack when they can simulate the click with JavaScript?
What's the reason why an attacker should choose to perform a clickjacking attack? If they create a malicious website, they could just perform the action automatically, they don't need to "trick&...
- 537
2 votes
0 answers
99 views
Trying to send a POST request using curl to a HTB machine
I`m trying to perform a SSRF attack on a Hack The Box machine (editorial.htb). I'm trying to send a POST request using curl with the command curl --data "hckyou.txt" -X POST http://...
- 21
0 votes
0 answers
110 views
Tabnabbing, adblocking and web browser security
My question regards tabnabbing and how to block it. I will first describe my understanding of the subject, but I'm no expert, so this introduction is meant for you to correct me if applicable. Here is ...
- 19
0 votes
1 answer
1k views
Is it possible to disable or change sec-fetch-* HTTP headers?
I might have found a way to highjack an Oauth Flow, but the source server is responding with 403 errors when the Oauth request is sent with a Sec-Fetch-Dest HTTP header. Is there a way to alter or ...
- 1,512
21 votes
6 answers
16k views
Are Cyrillic characters a real threat?
I've seen people in security saying URLs with Cyrillic characters are dangerous. If you ever type such characters on a browser you'd see they break into crazy unrecognizable URLs that have nothing to ...
- 375
0 votes
1 answer
306 views
Obfuscated HTML [closed]
I'm looking at a potential phishing site and I see that some of the HTML is obfuscated. It's not Base64. All the links look like this: <link href="6bkaQeQe69e/st-...
