Page caching by the browser

Question

I'm trying to debug how IE caches page data (such as input and textarea ) in the browser history.

Navigation sequence:

Page1 with textarea -> user navigates to Page2 -> goes back to Page1 and textarea data is repopulated by the browser

If the user injects malicious code into the textarea , it gets evaluated by the angular and leads to XSS attack.

My objective is to sanitize the data before it gets stored in the browser history. Any leads to understanding this will be helpful.

Answer 1

I didn't got any official docs that could specify how exactly IE stores the field data to cache. Here are some articles you could refer to get some information about the topic.

1. Understanding Microsoft Internet Explorer Cache

2. Ie caching form data

Further, I didn't find any document that explain the caching deeply at field level.

I understand that you want to sanitize the data before it get cached. I would suggest validation of those fields may help to prevent user inserting the malicious code.