In this section, we’ll look at how web messages can be used as a source to exploit DOM-based vulnerabilities on the recipient page. We’ll also describe how such an attack is constructed, including how common origin-verification techniques can often be bypassed. If a page handles incoming web messages in an unsafe way, for example, by not verifying…

Read More

In this section, we’ll look at what DOM-based Ajax request-header manipulation is, talk about the potential impact of this kind of attack, and suggest ways to reduce your exposure to Ajax request-header manipulation vulnerabilities. What is DOM-based Ajax request-header manipulation? Using Ajax enables a website to make asynchronous requests to the server so that web…

Read More

In this section, we will describe what DOM clobbering is, demonstrate how you can exploit DOM vulnerabilities using clobbering techniques, and suggest ways you can reduce your exposure to DOM clobbering attacks. What is DOM clobbering? DOM clobbering is a technique in which you inject HTML into a page to manipulate the DOM and ultimately…

Read More

In this section, we’ll describe DOM-based denial-of-service vulnerabilities, look at which sinks can lead to this kind of vulnerability, and discuss ways to reduce your exposure to DOM-based DOS attacks. What is DOM-based denial of service? DOM-based denial-of-service vulnerabilities arise when a script passes attacker-controllable data in an unsafe way to a problematic platform API,…

Read More

In this section, we’ll look at what DOM-data manipulation is, discuss the potential impact of this kind of attack, and look at ways to reduce your exposure to DOM-data manipulation vulnerabilities. What is DOM-data manipulation? DOM-data manipulation vulnerabilities arise when a script writes attacker-controllable data to a field within the DOM that is used within…

Read More

In this section, we’ll describe client-side JSON injection as related to the DOM, look at how damaging such an attack could be, and suggest ways to reduce your exposure to this kind of vulnerability. What is DOM-based JSON injection? DOM-based JSON-injection vulnerabilities arise when a script incorporates attacker-controllable data into a string that is parsed…

Read More

In this section, we’ll look at what DOM-based XPath injection is, discuss the potential impact of this kind of vulnerability, and suggest ways to reduce your exposure to them. What is DOM-based XPath injection? DOM-based XPath-injection vulnerabilities arise when a script incorporates attacker-controllable data into an XPath query. An attacker may be able to use…

Read More

In this section, we’ll discuss what DOM-based client-side SQL injection is, describe how an attacker can exploit this vulnerability, and suggest ways to reduce your exposure to this kind of attack. What is DOM-based client-side SQL injection? Client-side SQL injection vulnerabilities arise when a script incorporates attacker-controllable data into a client-side SQL query in an unsafe way….

Read More

In this section, we’ll talk about what DOM-based local file-path manipulation is, look at the potential impact of an attack, highlight some of the sinks that can lead to this kind of vulnerability, and suggest ways that you can reduce your exposure. What is DOM-based local file-path manipulation? Local file-path manipulation vulnerabilities arise when a…

Read More