Secondary Categories: 02-Web Application
Description:
- DOM XSS
- DOM-based XSS are a rare attack method and isn’t as commonly seen. DOM stands for Document Object Model. A DOM-based XSS arises when an application contains some client-side Javascript that processes data from an untrusted source in an unsafe way that usually ends up writing back to the DOM.
- Example: If an application uses some javascript to read the value of an input filed and write that value to an element within the HTML. Then the attacker can control the value of the input field and can cause there malicious code to execute.
- Links:
- DOM-based XSS are a rare attack method and isn’t as commonly seen. DOM stands for Document Object Model. A DOM-based XSS arises when an application contains some client-side Javascript that processes data from an untrusted source in an unsafe way that usually ends up writing back to the DOM.
Resources:
| Title | URL |
|---|---|
| place | holder |