Hello, everyone.
Welcome to my goals.
In this lecture.
You will learn about injecting an intended ex in.
Whenever we bend, test an application and we see that the application functionality has its aim in
passing in the.
Back in.
We try to paint the app with exhibit injection issues.
Usually we will then examine Pastor to see whether the grant applications examine document is properly
formatted or not.
We also validate the examined documents.
We the examine pather before penetration testing in the application.
We examine induction issues using a similar pather.
Is it normal prosody?
These are type up.
A simple injection can cause medium to severe kind of damage is through the application.
It again altered the intended logic of the application.
That is the reason why we call it unintended examine injection.
As you've been disturbed, when you examine a Web application, you put it to that test to insert examine.
Meta characters to modify the structure of the resulting if aimin.
Hearted ex email exim in Egypt, software and hardware, independent languages for installing and transporting
data.
Second example is dance for Extensible Markup languages and is similar to ASTM in turn.
Email was designed to be still descriptive.
So you can design the structure according to your necessity.
Finally, you need to define both the deaths and the documented structure in a way that is meaningful.
As you all design a database table and field, because you will find that example in a similar to a
database.
The next big caution is why we need X email instead of using a database.
Why should we use an existing document?
The biggest advantage of ASML is that it is software and hardware independent.
And a similar document is stored data in the.
Plain text that makes things much easier, therefore it simplifies this.
The process is storing and transporting data.
Let us see an example of examine data.
This is the example.
Here angle rugged email is an element inside the.
Angle market e-mail, an event we have more in events such as to from.
And a message you can add as many elements as you wish.
It is similar to what they've been in their database higher you created they've been called email.
Inside the email table you have fields call two and so on.
Of course, you can write the theme while energy is on.
Like these.
And you did that as a supporter and a storage facility.
Jason is quickly overtaking A.T.M. in popularity.
How if her is still in many Web applications.
You will find that uses up X m l because it has been popular for many years.
Hard, easy.
Dee Dee Dee, a document type definition are DTD defines the legal elements and attributes of an ex
living document with a DTD.
Developers agree on a standard data structure for storing and transporting data.
Furthermore, an application can verify with the help of DTD that an ex email document is properly formatted
or not.
It will also check whether there is email data is defined internally within.
And if email documents are from an external source like a.
You are.
I are, you are ill.
DTD allow us to define heart will be the key words and entities in and if aimin document does the examine
parner abilities.
This can be done by injecting new keywords and entities.