Inspection and Sanitization Guidance for HyperText Markup Language (HTML)

Abstract: The purpose of this document is to provide guidance for the development of a sanitization and analysis software tool for HyperText Markup Language. It introduces the syntax of various elements within the language and then discusses several elements that have data hiding, data attack, and data disclosure risks. This document provides an analysis of these elements and recommendations to mitigate their risks.

Date Published:

Last Reviewed: 11 December 2017

Identifier: U/OO/234037-17

Dissemination Control: N/A

Length: 137 page(s)

Format: pdf

Type: Reference/Overview; Report

Tags: National Security Agency - NSA; Cyber; Guidance; Exploitation; Vulnerability; Data