So initially, we're going to take a look at another article that is actually American action, so this
action arises when the user input is not properly filtered or it's unsanitized input just happening
to the, uh, something.
And it is rendered by the browser attached to an element.
So this is a simple, uh, whichever form I have written.
So this is the submit feedback can see.
Please enter your feedback.
So let me open this.
So this is the form you can see your name.
We should control them and the end, the feedback and upon submission you will get something.
So here what it does is a one submission.
It will it will tell the, uh, thanks for your submission.
My username.
I have entered the user username.
So this is the enter your name.
This is the input I have given him and the feedback for this feedback.
And upon clicking this button this way, function from the JavaScript will get to do good.
I have written this right here in the script, as you guys can see first the in the document not determined
by name, but value.
So we are getting the name.
What we are to put in this text works into this variable.
Name one.
And then what we're going to do is we're going to set this paragraph to this.
Right.
Thanks for your feedback, plus the reviews.
So let me show you Nicole and the feedback.
I like, uh, this wildy.
I like this website.
I know if I would enter, uh, the submit button, you can see.
Thanks for the feedback.
So this is the, uh, this is exactly the value you have entered this text.
So that means this thing is not going maybe not going to convert into string.
It's just happened.
So here you can see I'm just building I did not convert this, uh, value in publishing and just appending
to this thing.
So this problem arises when people want some I want to call the fast.
So he will just keep the press and name one.
So now what we can do is we can inject our original code that search the email and say, I wanted this
to test.
We just execute the 110.
That is harder when it's high and afterwards we cross that out and we are so close the achievement.
So this so now let's push that record here and feedback's and then if I submit this, you can see that
extremity is rendered.
So in this way, you can all in history, you wish this instrument actually still exists because you
can keep the script back and you can execute the Dow.
So now what we're going to do is we are going to get on one, two, three, four.
So we are going to create the pushing site that will look like the user name and password and and submit
button.
So in this scenario, you won't get these text boxes after you submit to another page.
But it's a simple, static, uh, simple, uh, Web page.
I just I'm showing you here, in normal scenario, when you click enter, uh, after your feedback,
then it will turn the page and it will say thanks for your feedback or even this will not show you in
the same page.
So what we're going to do is we are going to create a new fake form that is like let's think of it as
a, uh, Facebook or any other place.
You can just put on the page and you can submit the original here.
I'm saying form an action is equal.
Now I need to specify this IP address.
So this is one or two and the port is one, two, three, four typed here.
And we need to metaphysic to post.
So I know what we're going to do is we are going to say enter username and password.
Now, the decision put, uh, boxes tape is equal to extradite.
And we need to name this variable as a username so that on the cardigan side, we can understand, uh,
this is a user name field.
So now let me give the break a new line, and now we are going to enter password.
So we can type in type two password to make sure that this is not be typing in letters to be a president,
not as a plain text.
So user thinks that it's as if the name is going to pass.
And let's put another break, and now we are going to create the submit button and put a epicycles to
submit and value is equal to value means the value of the text that will be shown on the button.
Value is equal to log.
So now let me close this phone and cross the.
So let me copy this one in the copy.
Now let's read this page and push the original code here and share some feedback.
And you can submit, as you guys can see, we have got the form now and again and again the request
the request will be received by our colonics machine.
Now, you can see this is a post request post this IP address and the username and political statement.
So that's how you do the pushing and using this election.
So all you need to do is you need to make some pushing, pitching and using copier and then change this,
uh, action and the password and something.
She can just simply turn this over so that you use the password.
So the first video, I hope I understood this action.
So the problem arises when you are opening the strength to the user, uh, input, it would be happening
as, uh, normal one without converting into the string.
So that's how the system in action areas.
So you need to convert this into the.