We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hi, thanks for this script : )
I was comparing yours with this one which is only the list of sources and sinks: https://github.com/Sivnerof/Sources-And-Sinks-Cheatsheet
I noticed you wrote: WINDOWS_SOURCES="windows.name"
I'm not sure, but I guess it should be window.name
Also, I couldn't find these:
document.write() document.writeln() element.outerHTML element.insertAdjacentHTML element.onevent
The following jQuery functions are also sinks that can lead to DOM-XSS vulnerabilities:
add() after() append() animate() insertAfter() insertBefore() before() html() prepend() replaceAll() replaceWith() wrap() wrapInner() wrapAll() has() constructor() init() index() jQuery.parseHTML() $.parseHTML()
Thanks : )
The text was updated successfully, but these errors were encountered:
Thank you ! I've updated the list and fix the typo
I will look for the jquery one later (don't hesitate to make a PR otherwise)
Sorry, something went wrong.
Thank you so much ❤️
No branches or pull requests
Hi, thanks for this script : )
I was comparing yours with this one which is only the list of sources and sinks:
https://github.com/Sivnerof/Sources-And-Sinks-Cheatsheet
I noticed you wrote:
WINDOWS_SOURCES="windows.name"
I'm not sure, but I guess it should be window.name
Also, I couldn't find these:
document.write()
document.writeln()
element.outerHTML
element.insertAdjacentHTML
element.onevent
The following jQuery functions are also sinks that can lead to DOM-XSS vulnerabilities:
add()
after()
append()
animate()
insertAfter()
insertBefore()
before()
html()
prepend()
replaceAll()
replaceWith()
wrap()
wrapInner()
wrapAll()
has()
constructor()
init()
index()
jQuery.parseHTML()
$.parseHTML()
Thanks : )
The text was updated successfully, but these errors were encountered: