Collected research
Double eval() for DOM based XSS
Where a DOM sink is eval('getProduct('+koko+')'), a payload that needs its own quotes breaks the surrounding string and only raises a syntax error. Wrapping it in a second eval over String.fromCharCode passes digits alone through the outer string, and the inner eval rebuilds and runs the quoted payload. It turns an apparently unexploitable DOM XSS into a working proof.
Record
- Researcher
- shreeraj
- Published by
- shreeraj.blogspot.com
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of shreeraj, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .