I am currently investigating how Internet Explorer caches page content (such as input
and textarea
) in the browsing history.
Steps taken:
User visits Page1 with a textarea
, then navigates to Page2, and returns to Page1 where the textarea
data is automatically filled in by the browser.
If malicious code is inserted into the textarea
, it can be executed by Angular and result in a XSS attack.
My goal is to sanitize the data before it is stored in the browsing history. Any insights or suggestions on this matter would be greatly appreciated.