Is this code vulnerable to DOM based XSS? jquery wrap()

Asked 7 months ago

Viewed 96 times

Data is read from window.location and passed to the wrap() function of function of jQuery via the following statement:

t.Location.wrap(window.location)

The version of jQuery in use is the 1.12.1 - Is this code vulnerable to DOM based XSS?

Joe

2,5692 gold badges9 silver badges21 bronze badges

asked Feb 3 at 17:58

John Flow

11 bronze badge

Difficult to tell when we don't know what t.Location is. Would you be willing to add more context and detail to your question? – EdOverflow Feb 4 at 16:37
try it with a script tag. if it calls .html() internally, it's likely vulnerable. – dandavis Feb 4 at 21:54

add a comment |

0 Your Answer

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy