implementing support for dom xss

2016-11-23 17:24:59 -05:00
parent 5347311319
commit e183c8d8b3
3 changed files with 74 additions and 1 deletions
--- a/webgoat-lessons/cross-site-scripting/src/main/resources/plugin/CrossSiteScripting/js/dom-xss.js
+++ b/webgoat-lessons/cross-site-scripting/src/main/resources/plugin/CrossSiteScripting/js/dom-xss.js
@ -0,0 +1,11 @@
+//webgoat.customjs.phoneHome = function (e) {
+//    webgoat.customjs.jquery.ajax({
+//        method:"POST",
+//        url:"/WebGoat/CrossSiteScripting/dom-xss",
+//        data:{param1:42,param2:24},
+//        headers:{
+//            "x-request-with":"dom-xss-vuln"
+//        },
+//        contentType:'application/x-www-form-urlencoded; charset=UTF-8'
+//    });
+//}