Hot answers tagged

2 votes

xss: is it possible to continue javascript code execution after a "throw new Error()" line?

If you're really injecting inside a javascript file then I can't see a way to continue execution. If you're injecting inside a script tag in an html document, then you can close the script tag and ...
  • 21
2 votes

How is a XSS attack possible in this context?

May be you consider it from the client side only. But XSS injection can be executed also on the backend side. Suppose you use Velocity to generate HTML. It is valid also for any other engine, but ...
  • 10.8k
1 vote
Accepted

xss: is it possible to continue javascript code execution after a "throw new Error()" line?

There are a lot of unexpected corners of the language that could change the control flow. There may be new ones added in future versions of JavaScript To be safe, I would always assume that allowing ...
  • 481

Only top scored, non community-wiki answers of a minimum length are eligible