Data is read from window.location
and passed to the wrap()
function of function of jQuery via the following statement:
t.Location.wrap(window.location)
The version of jQuery in use is the 1.12.1 - Is this code vulnerable to DOM based XSS?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
t.Location
is. Would you be willing to add more context and detail to your question? – EdOverflow Feb 4 '19 at 16:37.html()
internally, it's likely vulnerable. – dandavis Feb 4 '19 at 21:54