Can anyone tell me something about <![CDATA[]]>]]> XSS ?

[neufmartial]

Hi,

Can anyone tell me something about <![CDATA[]]>]]> XSS vulnerability?

please have a look at the following link.

https://www.owasp.org/index.php/Testing_for_XML_Injection_(OWASP-DV-008)

It tells something about CDATA section delimiters: <![CDATA[ / ]]>

Can anyone elaborate that, with examples?

Also is it associated with .xhtml pages? Is it required to handle CDATA "]]>" character for XSS in .html application?

Regards,
Dinesh

[mitpatoliya]

Yes,
That  tag is used generally when you want to include html inside xml or vice versa.
It prevent the conflicts between the tags of html and xml.
what ever section put inside that tag all the tags mentioned inside that are ignored.