NETRIX SL / WEB SECURITY ARENA

Reflected in the Wrong Context

Context-sensitive output encoding

Lab 11 / 13 · Return to Arena

Welcome to this intentionally vulnerable training application.

Objective: Context-sensitive output encoding. Inspect requests and responses with Burp Suite or browser developer tools. Use only the synthetic accounts and data supplied here.

Do not attack the arena portal or any system outside this lab.

Starting point: Compare HTML and attribute contexts



Authorized training only · synthetic data · lab 11