Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cross-site scripting (DOM-based) - Data is read from location and passed to $()

rajauzairabdullah | Last updated: Nov 03, 2022 10:58AM UTC

Static Analysis: Data is read from location and passed to $() via the following statement: window._gaq.push(['_trackEvent', 'Cookies', 'Learn more link clicked', $(location).attr('href')]) Vulnerable Code: $link.on('click', function () { window._gaq.push(['_trackEvent', 'Cookies', 'Learn more link clicked', $(location).attr('href')]); }); Burp Pro shared DOM- Bases XSS in an active report, I need help to understand what to do here.

rajauzairabdullah | Last updated: Nov 03, 2022 10:59AM UTC

i just want to know, is there any possibility to execute DOM Based XSS ?

Liam, PortSwigger Agent | Last updated: Nov 03, 2022 12:00PM UTC