Mining and research on security vulnerabilities of HTML functions in websites

Binglin Song; Fengrui Shi; Zhihui Liu

doi:10.1117/12.3052220

15 January 2025 Mining and research on security vulnerabilities of HTML functions in websites

Binglin Song, Fengrui Shi, Zhihui Liu

Author Affiliations +

Proceedings Volume 13516, Fourth International Conference on Network Communication and Information Security (ICNCIS 2024); 135160T (2025) https://doi.org/10.1117/12.3052220
Event: International Conference on Network Communication and Information Security (ICNCIS 2024), 2024, Hangzhou, China

Abstract

With the rapid development of Web technologies, HTML functions are increasingly widely used in Web applications. However, the security issues of HTML functions have also emerged, becoming a major hidden danger in cybersecurity. This paper aims to systematically explore and study the security vulnerabilities of HTML functions in Web websites. Through actual case analysis, we demonstrate how to use the oncopy event to manipulate users' clipboard content to achieve potential attacks. The research results show that these vulnerabilities are widespread in existing Web applications and can be easily exploited maliciously, leading to user information leakage and system damage. Through in-depth research on these vulnerabilities, we have proposed a series of effective protective measures and best practices to help developers improve security when writing HTML code.

(2025) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Binglin Song, Fengrui Shi, and Zhihui Liu "Mining and research on security vulnerabilities of HTML functions in websites", Proc. SPIE 13516, Fourth International Conference on Network Communication and Information Security (ICNCIS 2024), 135160T (15 January 2025); https://doi.org/10.1117/12.3052220

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

;

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE