Server-side Template Injection

Introduction

In this section we will cover the template injection vulnerability. First we have to know what is a template and some basic concepts.

Template Engines

First of all we need to know what is a template engine. You'll find the info here: Template Engines, Is refering to python, but it works.

System elements

Now we need to understand how it works and some elements.

You'll find that info here: Template processor

Technologies

The important thing to note here is the different technologies that we can find per language and that there are a lot of template engines with different syntax and characteristics.

You'll find the info here: Comparison of web template engines

---