---
title: Injection
description: Injection attacks send untrusted input that the server or browser interprets as code or commands, including SQL, OS commands, and HTML; XSS is the browser-side form of HTML injection.
tokens: ~0
---

# Injection

undefined