terjanq/same-origin-xss

This is stars and forks stats for /terjanq/same-origin-xss repository. As of 23 Apr, 2024 this repository has 55 stars and 5 forks.

soXSS - writeup Introduction The challenge consisted of two components: Text input for HTML notes. Rendered HTML page from textarea, rendered inside an iframe. The embedded iframe was within the same origin, but data sent to it was sanitized by DOMPurify. The idea The idea for the challenge was rather simple: Bypass the below snippet included inside iframe. const identifier = '4a600cd2d4f9aa1cfb5aa786'; onmessage = e => { const data = e.data; if (e.origin !== window.origin && data.identifier...