HTML5-based mobile apps vulnerable to cross-site scripting attacks: Experts

Advertisement
By Indo Asian News Service | Updated: 10 April 2014 13:57 IST
As you are busy sending SMSs, reading emails or listening to music on your smart phone, do you realise that these simple things can get your smart phone infected with 'worms' that can not only steal personal information from your phone, but also infect your friends's phones?

Sound scary? You can blame a new technology that is behind the development of your favourite apps.

An emerging technology called HTML5-based app development has been rapidly gaining popularity in the mobile industry.

"When the adoption of this technology reaches certain threshold, worm attacks would become quite common unless we do something to stop it," a latest report from US-based IT research agency Gartner warned.

Advertisement

By 2016, 50 percent of the mobile apps will be using HTML5-based technologies.

Advertisement

"All major mobile systems would be affected, including Android, iOS, Blackberry, Windows Phone, etc., because they all support HTML5-based mobile apps," the report cautioned.

A notorious problem of the HTML5-based technology is that malicious code can be easily injected into the programme and get executed.

Advertisement

That is why the Cross-Site Scripting (XSS) attack is still one of the most common attacks in the Web.

"XSS attacks can only target at web applications through a single channel (Internet) but with the adoption of the same technology in mobile devices, we have found out that a similar type of attack can not only be launched against mobile apps," Gartner noted.

Advertisement

It can attack from Wi-Fi scanning, Bluetooth pairing, MP3 songs, MP4 videos, SMS messages, NFC tags and contact list.

"As long as an HTML5-based app displays information obtained from outside or from another app, it may be a potential victim," Gartned added.

 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. Vivo X300 Launched in India With MediaTek Dimensity 9500 SoC at This Price
  2. Ray-Ban Meta Gen 2 Glassses Are Now Available in India
  3. Amar Subramanya to Replace John Giannandrea as Apple's VP of AI
  4. Poco C85 5G Teased to Launch in India Soon With These Features
  5. Redmi 15C 5G Camera Details Confirmed a Day Ahead of Launch in India
  6. Government Says Sanchar Saathi App Is Optional, Can Be Removed
  7. Vivo X300 Pro Review: Flagship Mobile Photography. Redefined.
  8. Samsung Galaxy S26 vs Galaxy S25: Here Are the Anticipated Upgrades
  9. Instagram Could Soon Limit the Number of Hashtags Used in a Post
  10. OnePlus 15R, OnePlus Pad Go 2 Set for Live Launch at Bengaluru Keynote
  1. Gemini App to Get a Major Design Upgrade, Could Soon Be Launched on macOS
  2. NASA’s Perseverance Records First-Ever Mini-Lightning on Mars
  3. Germany to Send First European Astronaut Around the Moon on Artemis Mission
  4. Indian Team Finds 53 Massive Quasars Blasting Jets Millions of Light-Years Long
  5. Mrs Deshpande OTT Release: When, Where to Watch Madhuri Dixit's Serial Killer Mystery
  6. Wake Up Dead Man: A Knives Out Mystery OTT Release: When, Where to Watch the Daniel Craig Whodunit
  7. Fire Force Season 3 Release Date: When, Where to Watch the Shonen Anime's Final Arc
  8. Thamma Is Now Available on Amazon Prime: How to Watch Ayushmann Khurrana's Horror Comedy
  9. The Great Shamsuddin Family OTT Release: When, Where to Watch the Peepli Live Director's Comedy Drama
  10. Sony Bank Plans US Dollar Stablecoin to Support Game, Anime Payments by 2026
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.