Mining and research on security vulnerabilities of HTML functions in websites
With the rapid development of Web technologies, HTML functions are increasingly widely used in Web applications. However, the security issues of HTML functions have also emerged, becoming a major hidden danger in cybersecurity. This paper aims to systematically explore and study the security vulnerabilities of HTML functions in Web websites. Through actual case analysis, we demonstrate how to use the oncopy event to manipulate users' clipboard content to achieve potential attacks. The research results show that these vulnerabilities are widespread in existing Web applications and can be easily exploited maliciously, leading to user information leakage and system damage. Through in-depth research on these vulnerabilities, we have proposed a series of effective protective measures and best practices to help developers improve security when writing HTML code.
Authors
- Fengrui Shi (ORCID: https://orcid.org/0000-0002-4241-811X)
- Zhihui Liu (ORCID: https://orcid.org/0000-0002-4232-7154)
- Byeong-gyu Song
Institutions
- Beijing International Studies University (CN)
- Tsinghua University (CN)
Publication Details
- Published
- 2025-01-16
- DOI
- https://doi.org/10.1117/12.3052220
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00