Quantcast
Channel: Soroush Dalili (@irsdl) Blog
Viewing all articles
Browse latest Browse all 21

Anchor Tag XSS Exploitation in Firefox with Target=”_blank”

$
0
0
Commonly, we use the JavaScript schema to exploit a cross-site scripting (XSS) issue, particularly when the href attribute of an anchor tag is within our control. Here’s an example: Modern browsers, however, thwart the execution of JavaScript code or block access to significant DOM objects, such as document.cookie, when the target attribute is set to […]

Viewing all articles
Browse latest Browse all 21

Trending Articles