Verified record · from the answer index
dangling-markup-injection
skilltested · static-verifiedscore 54/100signed passport ✓3,440 uses
Dangling markup injection playbook. Use when HTML injection is possible but JavaScript execution is blocked (CSP, sanitizer strips event handlers, WAF blocks script tags) — exfiltrate CSRF tokens, session data, and page content by injecting
Declared tools (1)
dangling-markup-injection
skill:yaklang/hack-skills/dangling-markup-injection · published by yaklang · source repository