asia-15-Johns-Client-Side-Protection-Against-DOM-Based-XSS-Done-Right-(tm)
asia-15-Johns-Client-Side-Protection-Against-DOM-Based-XSS-Done-Right-(tm)
asia-15-Johns-Client-Side-Protection-Against-DOM-Based-XSS-Done-Right-(tm)
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Partial Injections• Hijack an existing tag, attribute or textdocument.write("var urlhash='" + location.hash.slice(1) +"'"); • http://vuln.com/partial.h<strong>tm</strong>l#someValue'; alert(1); // var urlhash='someValue'; alert(1); //'