> For the complete documentation index, see [llms.txt](https://docs.pabloarrabal.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/client-side-template-injection-csti.md).

# Client-Side Template Injection (CSTI)

## ¿Que es un CSTI?

{% hint style="info" %}
Enlaces de Interés:

1. <https://book.hacktricks.xyz/pentesting-web/client-side-template-injection-csti>
2. <https://portswigger.net/kb/issues/00200308_client-side-template-injection>
3. <https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/CSTI-KnowageSuite7-3.md>
4. <https://www.paloaltonetworks.com/blog/prisma-cloud/template-injection-vulnerabilities/>
   {% endhint %}