Web Security
Stored DOM XSS – Weak escapeHTML() Bypass
A stored DOM XSS lab focused on tracing stored input and bypassing incomplete HTML escaping.
1 min read
- DOM XSS
- XSS
- PortSwigger
A write-up examining a stored DOM XSS vulnerability protected by an incomplete escapeHTML implementation.
Focus areas
- Following stored input from source to sink
- Understanding what the escaping function actually covers
- Identifying the parsing context after transformation
- Constructing a payload around the missing protection