HTML Smuggling

HTML smuggling is a technique that hides malicious files or phishing pages inside HTML attachments, which are assembled in the victim's browser to bypass email and network security. Because the payload is assembled locally in the browser with standard APIs, it slips past controls that inspect files crossing the network perimeter.