Top 10 winner

(DOMinator) Finding DOMXSS with dynamic taint propagation

dominator - Community version of the DOMinator for Firefox

The Google Code home of DOMinator, Minded Security's instrumented Firefox build that finds DOM-based XSS by propagating dynamic runtime taint through JavaScript string operations. The 2010 community release targets Firefox 3.6, warns it will not run on vanilla Firefox, and points at the commercial DOMinator Pro 2012.

Record

Document

dominator - Community version of the DOMinator for Firefox

Published by

Google Code

Topic

Browser

In the archive

• Ranked #4 in the 2011 Top 10 Web Hacking Techniques

Tags

• tooling
• dom
• xss
• dynamic-analysis
• javascript
• browser-extension
• detection
• owasp-a03-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Google Code, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.