Data is read from window.location and passed to the wrap() function of function of jQuery via the following statement:
t.Location.wrap(window.location)
The version of jQuery in use is the 1.12.1 - Is this code vulnerable to DOM based XSS?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
t.Locationis. Would you be willing to add more context and detail to your question? – EdOverflow Feb 4 '19 at 16:37.html()internally, it's likely vulnerable. – dandavis Feb 4 '19 at 21:54