CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

DOM XSS isn’t always in the HTML.

1 Posts 1 Posters 0 Views

M This user is from outside of this forum
M This user is from outside of this forum
marduk_james@infosec.exchange

wrote last edited by

#1

DOM XSS isn’t always in the HTML.
Sometimes your input never appears in the Source because JavaScript is building the page.
Source → Sink → Execution in real-world DOM flows.
https://medium.com/@marduk.i.am/url-based-xss-c41d94090e6e
#infosec #cybersecurity #bugbountytips #websecurity #OWASP
1 Reply Last reply
1
0
R relay@relay.infosec.exchange shared this topic

Log in to reply