Dom on Security Notes

Dom on Security Notes https://blog.omiilgo.com/tags/dom/ Recent content in Dom on Security Notes Hugo en-us Wed, 14 Apr 2021 16:20:00 +0800 DOM XSS and DOM Clobbering as Trust Problems https://blog.omiilgo.com/posts/dom-xss-and-dom-clobbering/ Wed, 14 Apr 2021 16:20:00 +0800 https://blog.omiilgo.com/posts/dom-xss-and-dom-clobbering/ Lab HTML+JS page: location.hash into innerHTML, name=form clobber of a config object, harmless redacted payload, CSP as the fix.