Merge pull request #823 from auk0x01/master

Fixed a Typo in pentesting-web/content-security-policy-csp-bypass
This commit is contained in:
HackTricks 2024-03-26 08:54:31 +01:00 committed by GitHub
commit f0ee6d12a9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -761,7 +761,7 @@ You could redirect by injecting a meta tag (this is just a redirect, this won't
### DNS Prefetch
To load pages faster, browsers are going to pre-resolve hostnames into IP addresses and cache them for later usage.\
You can indicate a browser to pre-resolve a hostname with: `<link reol="dns-prefetch" href="something.com">`
You can indicate a browser to pre-resolve a hostname with: `<link rel="dns-prefetch" href="something.com">`
You could abuse this behaviour to **exfiltrate sensitive information via DNS requests**: