Collected research
Dom Flow - Untangling The DOM For More Easy-Juicy Bugs
Hookish instruments DOM sources and sinks in a live page and tags data as it flows, so tainted values arriving at innerHTML, document.write or eval are flagged automatically. It is applied to XHR responses rendered as HTML, DOM clobbering through window.name to escape an iframe sandbox, window.opener tab hijacking, and unsafe String.replace in templating engines.
Record
- Researcher
- Ahamed Nafeez
- Published by
- blackhat.com
- Date
- Format
- Recording
- Topic
- Browser
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Ahamed Nafeez, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .