Index
Note: Page numbers followed by f indicate figures and t indicate tables.
A
Access-control-request-headers
247Access-control-request-method
247American Standard Code for Information Interchange (ASCII)
server-side HTML filter
29seven-bit encoding characters
17whitespace
33–34Audience
2B
Basic multilingual plane (BMP)
18Bypasses and attacks mitigation
11DOM protection
array detection
228–229closure, definition
231code replacement
229–230defineProperty
232–235extendWindow method
231Firefox function
226–227getter and setter syntax
231–232Internet Explorer
232JavaScript code
226layers
230object handling
230onpropertychange event
234proxy functions
231sandboxing
227–230SOP
227styles property
234top window reference
227offensive computing
217OWASP
217–218server- and client-side databases
217Web application bugs
218C
Cascading style sheets (CSSs)
10algorithm
131–132attacks
attribute reader
137–138clickjacking
133fcrawler and navigation monitor
139decompilation
135–137history
138–139IE6 and CSS2
134–135Internet Explorer
147LAN scanner
139remote stylesheet inclusion
139–148UI redressing
132–134URL
148conditional comments
50CSS3
149CSS1 vs. CSS2
126data theft
243–244declarations
130–131entities
64HTML5
239HTML vs. JavaScript
126JavaScript URIs
66–67layout engine
64parsers
220rulesets and selectors
129–130syntax
126Web security model
243–244Client-side filters
bypassing
205–213NoScript design
204vs. traditional
203fWAF
10–11web vulnerability
204CORS mechanism
Crossdomain.xml files
altCrossDomainXMLFiles
265APIs
264getRequestProperty method
264–265global wildcard
264Java SE 6.10
264JNLP files
265–266site-control element
265user-agent string
266Cross-origin resource sharing (CORS) mechanism
actual request
247preflight request
246preflight response
247Web site
246Cross Site Request Forgery (CSRF)
240–241CSSs
D
Database management system (DBMS)
applications
178–179functions
183–184language elements
182–183MySQL
179SELECT
181SQL injections
221XML
190Data URIs
Acid2 test
57arbitrary whitespace
59bandwidth
56–57base64 checkbox
58DOM
56event handlers
60–62HTML5
autofocus attribute
68Chromium and Opera
68–69DoS
70–71‹event-source›/‹eventsource›
69multimedia objects
67–68onblur event handler
69Opera 10.5
70Opera test-cases-domain
69–70quirky rendering bugs
70Web Forms 2.0 repetition model
70WHATWG
67W3Schools domain
68XHTML
68MIME type
57–58style attributes
chameleon files
63CSRF request
62CSS-based console
66–67CSS entities
64CSS layout engine
64HTML+TIME
64–65Internet Explorer tested versions
65–66onmouseover
62Opera
66sandbox object
67social networking platform
63–64unicode whitespace
65vbscript protocol handler
66XBL file
62–63style tags
60text/HTML
58–59unicode entity
59–60UTF-7 and UTF-16 character
58DBMS
Denial-of-service regular expression
213–215Document.URL
95E
Extensible Hypertext Markup Language (XHTML)
14H
HyperText Markup Language (HTML)
9ASCII range
17–18attack and defense
13BMP
18browser market competitors
24comments
20–21cross-domain XHR problem
23doctype declaration
14–15erroneous markup handling method
21–22injection and cross-site scripting
CSS parsers
220HTML Purifier
219–220JavaScript code
219Markdown
219PHPIDS attack detection
220safe HTML
219text format
218–219Web application filter
218–219ISO/IEC 8859-15 character set
17–18markup obfuscation
Mozilla Foundation
24Netscape Navigator
22–23remote code execution flaw
23rendering engines
22semantics and structure
23SGML
13strings and data types
13tags
15–17UTF-8 character set
18Web browser
23Web standards
24I
International Obfuscated C Code Contest (IOCCC)
105J
JavaScript (JScript)
compact value
100conditional comments
101–102encode value
100–101execScript function
102vs. HTML
126nonalphanumeric
arbitrary JavaScript
121ASCII
116atob
118binary data
118Boolean
110code execution
121–122false string
111FBML
120filter blocking
120Great JavaScript Charwall
121IOCCC
105native objects
110not a number (NaN)
109–110obfuscation
117octal escapes
116plain filter circumvention
119sandboxing algorithm
120sort function
114sort method
112static method
113–114string indexes
107toString method
118true string
111zero conversion
110variables
alphanumeric characters
91location.hash variable
94–95name variable
92–94unicode
95–96URL
95user-defined
91–92VBScript
9JavaScript Object Notation (JSON)
242–243JSReg
228M
Markup obfuscation
closing tags
40–42conditional comments
‹comment› tag
52CSS browser
50JScript layer
52MSDN
50–51outside and inside attributes
52–53Trident layout engine
51forensics
25fun
25–26JavaScript code alert(1) execution
24JavaScript execution
about:blank, page
43applet tags
47–48body tags
44data attribute
46DOM
46“encrypted” scripts
42frameset tags
44–45href attribute
45–46http-equiv attribute
49id/name attribute
48language attribute
42object tag
46onload attribute
42–43Opera
46–47quirks modes
47‹script› tags
42trigger script execution
43–44URIs
49W3C
42–43XML iframe
46multiple same-named attributes
Gecko-based browsers
39lowsrc attribute
39onerror attribute
38onmouseover
38–39src attribute
39type attribute
38xmlns, XML namespace attribute
40PHP
28separators
ASCII whitespace
33–34DoS attacks
35PCRE
34unicode character class
34–35UTF-8 character
34whitespace character
34–35tag names obfuscation
character set and PHP-based application
30Chrome charset
32chr( ), PHP code
30Firefox parser bug
33injection, Web site
33Japanese character set
31non-ASCII characters
29server-side HTML filter
29strip characters
30Trident layout engine
29XSS attacks/SQL injection
32technical requirements
26techniques
24–25Ubuntu 9.10 platform
26UTF-8 character
28Web application input filters
25Web sites
26Microsoft BlueHat security conference
259Microsoft Data Access Components (MDAC)
223N
Nonalphanumeric JavaScript
10Boolean
110false string
111FBML
120IOCCC
105minimalistic sets
arbitrary JavaScript
121code execution
121–122filter blocking
120Great JavaScript Charwall
121native objects
110not a number (NaN)
109–110obfuscation process
108–109plain filter circumvention
119sandboxing algorithm
120sort function
114sort method
112static method
113–114string indexes
107toString method
113true string
111zero conversion
110O
Open Web Application Security Project (OWASP) Validation Regex Repository
217–218Oracle
267Oracle Express Edition
180–181P
Perl Compatible Regular Expressions (PCRE)
34Personal Homepage (PHP)
10applications
226attacker-controlled PHP code
224–225auto_prepend_file
225–226BBCode
226code execution vulnerability
223–224functions
225Google Code Search Engine
224include and require statements
224strings
anonymous and variable functions
173–174arrays
160ASCII
162backtick notation
170–171code execution
167–169curly bracket notation
166–167encryption and decryption functions
162escape character
159–160evaluation
171heredoc and nowdoc syntax
161lambdas
172–173mixing and comments
165phpinfo( ) function
160–161sneak past filter rules
162superglobals
seeSuperglobals
variable variables
165–166Web scanning
224phpMyAdmin (PMA)
179S
Same Origin Policy (SOP)
CORS mechanism
crossdomain.xml file
246cross-site information exchange
245DOM-based solutions
245location.hash feature
227UMP
248–249Web security model
241XMLHttpRequest
245Scalable vector graphics (SVG)
77–79Server-side Web development
9Standard Generalized Markup Language (SGML)
13Strings
PHP
anonymous and variable functions
173–174arrays
160ASCII
162backtick notation
170–171code execution
167–169curly bracket notation
166–167encryption and decryption functions
162escape character
159–160evaluation
171heredoc and nowdoc syntax
161lambdas
172–173mixing and comments
165phpinfo( ) function
160–161sneak past filter rules
162superglobals
162–165variable variables
165–166Structured English Query Language (SEQUEL)
177Structured Query Language (SQL)
10concatenation-based bugs
222DBMS
first version
177Microsoft SQL procedure
223MySQL-specific code
222obfuscation
195–196Oracle Express Edition
180–181PMA
179proxy solution
223query form
180fquery structure
222–223SELECT query
181stacking queries
181–182strings
escaping
189–190hexadecimal notation
188–189regular notation and delimitation
187–188unicode
189XML
190–191WAFs
221wafw00f tool
221Web application security
223Web sites
221–222SVG
T
Text/html-sandboxed content type
253–255cross-domain file
253iframe@sandbox model
255legacy browsers
254MIME type
253Web servers
253–254Type juggling technique
157U
Uniform Messaging Policy (UMP)
248–249W
Web application firewalls (WAFs)
221applications
199cross-site scripting
202denial-of-service attacks
213–215public Web sites
199–200Web attacks
203Web applications
1Content-Security-Policy header
257cross-site scripting filters
238flash plug-in
allowScriptAccess argument
258always argument
258Flash movie
258LoadMovie method
258never argument
258sameDomain argument
258Security.allowDomain API
258–259HTML5
238cross-site scripting filters
245CSS3
239features
244–245JavaScript URLs origin
249–251sandbox attribute
251seamless attribute
251security project
245SOP
srcdoc attribute
252text/html-sandboxed content type
253–255XML bindings
255–256Java plug-in
AppletNode
261crossdomain.xml files
DNS rebinding attacks
266–267Java applets
260–261Java-based cross-site scripting
262–264Java's APIs
261Java security model
260shared host attack
261–262JavaScript code
238‹meta› tag
238–239‹param› tag
239security ramifications
237security-related extensions
256Strict-Transport-Security header
256–257toStaticHTML method
238URL parsing
239W3C
237–238Web security model
CSRF
240–241CSS
243–244error messages
243HTTP request
240JSON
242–243origin
241–242Web server
240–241Web sites
239web technology standards
257–258WHATWG
237–238whitelisting property
238–239X-Frame-Options header
256X-XSS-Protection header
256Web architecture
9Web security and technology
11X
Z
Zend Engine
152..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.