Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Data is read from window.location.href

SGSI | Last updated: Jun 02, 2023 07:49PM UTC

Hi We find this issue in one of our websites and we think that is a false positive. Data is read from window.location.href and passed to the 'append()' function of JQuery via the following statements: - url = window.location.href; - SFSI('.sfsi_flex_container').append('<div><a href="http://www.pinterest.com/pin/create/button/?url=' + url + '&media=&description=' + encodeURIComponent(page_title).replace('+', '%20').replace("#", "%23") + '"><div style="width:140px;height:90px;display:inline-block;" ></div><span class="sfsi_pinterest_overlay"><img data-pin-nopin="true" height="30" width="30" src="' + window.sfsi_icon_ajax_object.plugin_url + '/images/pinterest.png" /></span></a></div>') Could someone tell me if these are real JQuery issues and bugs are needed or the findings are false positive?

Hannah, PortSwigger Agent | Last updated: Jun 06, 2023 12:32PM UTC

Hi. Unfortunately, we can't provide specific assistance with dissecting/explaining scan reports. You can check out our learning materials on DOM-based cross-site scripting here: https://portswigger.net/web-security/cross-site-scripting/dom-based#dom-xss-in-jquery The learning includes interactable labs, where you can put into practice the techniques discussed in the learning materials.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.