Skip to main content
Information Security

Return to Question

deleted 3 characters in body; edited tags; edited title
Source Link
Anders
Anders
  • 65.8k
  • 25
  • 185
  • 226

Client What is client side non-dom persistent/reflected xssDOM XSS?

I've been reading on the new categories of XSS. According to OWASPAccording to OWASP, they're no longer just reflected, stored and domDOM-based xssXSS, but rather server/client side (and, and then subdivided into reflected/stored)

https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting.

According to the site, domDOM-based xss areXSS is just a specific section of Clientclient-side XSS. I'm not following the distinction between domDOM and non-domDOM client sideclient side XSS. Every client side XSS I can think of involves the DOM. I understand how can I can have persistent and non-persistent DOM client side XSS, but what would be an example of non-DOM client side xss?XSS (reflected and stored).?

Client side non-dom persistent/reflected xss

I've been reading on the new categories of XSS. According to OWASP, they're no longer just reflected, stored and dom-based xss but rather server/client side (and then subdivided into reflected/stored)

https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting

According to the site, dom-based xss are just a specific section of Client-side XSS. I'm not following the distinction between dom and non-dom client side XSS. Every client side XSS I can think of involves the DOM. I understand how can I have persistent and non-persistent DOM client side XSS, but what would be an example of non-DOM client side xss? (reflected and stored).

What is client side non-DOM XSS?

I've been reading on the new categories of XSS. According to OWASP, they're no longer just reflected, stored and DOM-based XSS, but rather server/client side, and then subdivided into reflected/stored.

According to the site, DOM-based XSS is just a specific section of client-side XSS. I'm not following the distinction between DOM and non-DOM client side XSS. Every client side XSS I can think of involves the DOM. I understand how I can have persistent and non-persistent DOM client side XSS, but what would be an example of non-DOM client side XSS (reflected and stored)?

Source Link
user134167
user134167
  • 183
  • 1
  • 3
  • 8

Client side non-dom persistent/reflected xss

I've been reading on the new categories of XSS. According to OWASP, they're no longer just reflected, stored and dom-based xss but rather server/client side (and then subdivided into reflected/stored)

https://www.owasp.org/index.php/Types_of_Cross-Site_Scripting

According to the site, dom-based xss are just a specific section of Client-side XSS. I'm not following the distinction between dom and non-dom client side XSS. Every client side XSS I can think of involves the DOM. I understand how can I have persistent and non-persistent DOM client side XSS, but what would be an example of non-DOM client side xss? (reflected and stored).