Automated Transformation of Template-Based Web Applications into Single-Page Applications

Oh, Jae‐Won; Ahn, Woo Hyun; Jeong, Seungho; Lim, Jisun; Kim, Taegong

doi:10.1109/compsac.2013.54

Cited by 3 publications

(4 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For web applications, templates are dynamically generated web pages based on a structure that helps users easily obtain information [4], [6].…”

Section: Templatementioning

confidence: 99%

“…But in website term injection means putting an external arbitrary query or modifying some requests by intercepting web requests. Thus, an injection allows malicious payload with web application requests into another server [4]. A successful injection can read sensitive data and can get root privilege to that server [1], [5], [6], [9].…”

Section: Injectionmentioning

confidence: 99%

“…Developers also feel relaxed with Ajax due to its robustness and easy integrability with API. Usually Ajax displays data in XML, JSON, or plain text starting from this stage [1], [4]. Since developers are not very much aware to implement the secured tunneling protocols like Hyper Text Transfer Protocol Secure (HTTPS), Secure Sockets Layer (SSL), Transport Layer Security (TLS), etc., attackers, working as middleman, are trying to list and intercept all request from server through insecure protocol like Hyper Text Transfer Protocol (HTTP) to manipulate the requests [1], [7], [10].…”

Section: Introductionmentioning

confidence: 99%

“…Moreover, the websites of the Bangladesh government are vulnerable to these attacks. The two attacks are interrelated because an attacker can launch an XSS attack by exploiting a CSRF attack on a vulnerable website [4]. The authors consider SQLi vulnerability, which is a damaging attack against web application database credentials.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

A Study of Ajax Template Injection in Web Applications

Noyon¹,

Abid²,

Hassan³

et al. 2018

IJET

View full text Add to dashboard Cite

Cyber-attacks are becoming increasingly frequent, causing a lot of damage. Cyber-attacks have crippled our economic infrastructure both directly and indirectly. Attackers steal our valuable data by compromising web application security loopholes. Developers can prevent cyber-attacks using latest web technologies. Since web technologies are becoming more secure, cyber attackers are getting more incursive to find out the zero day vulnerability of the targeted system to breach the security. Nowadays most damaging attacks are done using zero-day vulnerability. An Ajax template injection is such an attack: An unauthenticated attacker dumps database table credentials by intercepting server response. Owing to the damage caused by an Ajax template injection, it can be counted among the OWASP top ten web application vulnerabilities in the near future. This paper discusses the idea of an Ajax template injection and its impact on Ajaxbased web applications. This paper also provides statistical data about the percentage of Ajax-based web application vulnerabilities in Bangladesh.

show abstract

“…For web applications, templates are dynamically generated web pages based on a structure that helps users easily obtain information [4], [6].…”

Section: Templatementioning

confidence: 99%