HTML5-based mobile apps vulnerable to cross-site scripting attacks: Experts

Advertisement
By Indo Asian News Service | Updated: 10 April 2014 13:57 IST
As you are busy sending SMSs, reading emails or listening to music on your smart phone, do you realise that these simple things can get your smart phone infected with 'worms' that can not only steal personal information from your phone, but also infect your friends's phones?

Sound scary? You can blame a new technology that is behind the development of your favourite apps.

An emerging technology called HTML5-based app development has been rapidly gaining popularity in the mobile industry.

Advertisement

"When the adoption of this technology reaches certain threshold, worm attacks would become quite common unless we do something to stop it," a latest report from US-based IT research agency Gartner warned.

By 2016, 50 percent of the mobile apps will be using HTML5-based technologies.

"All major mobile systems would be affected, including Android, iOS, Blackberry, Windows Phone, etc., because they all support HTML5-based mobile apps," the report cautioned.

A notorious problem of the HTML5-based technology is that malicious code can be easily injected into the programme and get executed.

Advertisement

That is why the Cross-Site Scripting (XSS) attack is still one of the most common attacks in the Web.

"XSS attacks can only target at web applications through a single channel (Internet) but with the adoption of the same technology in mobile devices, we have found out that a similar type of attack can not only be launched against mobile apps," Gartner noted.

Advertisement

It can attack from Wi-Fi scanning, Bluetooth pairing, MP3 songs, MP4 videos, SMS messages, NFC tags and contact list.

"As long as an HTML5-based app displays information obtained from outside or from another app, it may be a potential victim," Gartned added.

 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. iOS 27.2 Update: Six iPhone Apps Set to Get New Features Next Week
  2. Oura Launches Ring 5 in India Equipped With These Features
  3. Samsung W27 Foldable to Reportedly Launch on This Date in China
  4. OnePlus Turbo Pro Specifications Leaked
  5. Oppo Reno 16 Price in India Rises, New 128GB Model Launched
  1. MEXC to Shut Services in Russia and Belarus as Compliance Rules Tighten
  2. Redmi Book 2027 Series Launch Date Set for October 27; Design, Specifications Teased
  3. Samsung ‘Heart of the World’ Event to Take Place Next Week in China to Reportedly Launch Samsung W27 Foldable
  4. Microsoft Rolls Out Standalone Cloud Playtime Packs to Xbox Insiders
  5. Xiaomi 18 Pro Max, Oppo Reno 17 5G Receive NBTC Certification Ahead of Global Launch
  6. Oura Ring 5 Launched in India With AI Health Features, Blood Pressure Tracking: Price, Specifications
  7. Bitcoin Holds Near $83,000 as Tesla Keeps 11,509 BTC Holdings
  8. OnePlus Turbo Pro Tipped to Launch With 185Hz Refresh Rate Display, 200-Megapixel Rear Camera
  9. Claude Duet AI Assistant Research Preview Powered by Opus 5.5 Model Released as a Standalone iOS, Android App
  10. Vivo Y600 Launch Date Confirmed for October 30 in China, 10,000mAh Battery Revealed
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.