File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -69,6 +69,7 @@ S.No. | Topic
6969** 48** | [ Vulnerable Code Snippet - 35] ( /resources/vulnerable-code-35.md )
7070** 49** | [ Vulnerable Code Snippet - 36] ( /resources/vulnerable-code-36.md )
7171** 50** | [ Vulnerable Code Snippet - 37] ( /resources/vulnerable-code-37.md )
72+ ** 51** | [ Vulnerable Code Snippet - 38] ( /resources/vulnerable-code-38.md )
7273
7374# SecurityExplained NewsLetter
7475
Original file line number Diff line number Diff line change 1+ ### SecurityExplained S-51: Vulnerable Code Snippet - 38
2+
3+ #### Vulnerable Code:
4+
5+ ![ Vulnerable Code] ( ../media/code-38.jpg )
6+
7+
8+ #### Solution:
9+
10+ The code is vulnerable to DOM-based XSS and allows execution of XSS using "s" parameter using payloads like: x'onmouseover=alert(1)//
11+
12+ Twitter Thread: https://twitter.com/harshbothra_/status/1495224184611524608
13+
14+ ##### Code Credits: @Brumens2
You can’t perform that action at this time.
0 commit comments