Whitepaper that discussions both code and html injection attacks.
You can download it from the following link: https://packetstormsecurity.com/files/download/143995/codehtml-injection.pdf
Source: https://packetstormsecurity.com/files/143995/Code-Injection-HTML-Injection.html