2
votes
xss: is it possible to continue javascript code execution after a "throw new Error()" line?
If you're really injecting inside a javascript file then I can't see a way to continue execution. If you're injecting inside a script tag in an html document, then you can close the script tag and ...
- 21
2
votes
How is a XSS attack possible in this context?
May be you consider it from the client side only. But XSS injection can be executed also on the backend side.
Suppose you use Velocity to generate HTML. It is valid also for any other engine, but ...
- 10.8k
1
vote
Accepted
xss: is it possible to continue javascript code execution after a "throw new Error()" line?
There are a lot of unexpected corners of the language that could change the control flow. There may be new ones added in future versions of JavaScript To be safe, I would always assume that allowing ...
- 481
Only top scored, non community-wiki answers of a minimum length are eligible