- Is it possible to do a DOM based xss attack with window.location.protocol?
- How can we use dom based xss with document.title?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
I'm not sure what you mean? You can't "break out" of
Again, you can't exploit
escape(AttackerString) but you can exploit something like
&AttackerString="); alert("xss in the case the html output would be: