Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

DOM XSS Flagged - Burp Enterprise

gr3p | Last updated: Feb 21, 2023 03:40PM UTC

Hi, I have had a few instances of DOM XSS flagged but I'm thinking its a FP: function gBU() { var protocol = window.location.protocol; var port = window.location.port; var host = window.location.hostname; var path = window.location.pathname; // is port present? if (port != "") port = ":" + port; else port = ""; // remove file expression path = path.substr(0, path.lastIndexOf("/") + 1); // concat url var url = protocol + "//" + host + port + path; return url; } document.getElementById(resultfield).innerHTML = '<img src="' + gBU() + 'static/welcome.gif">'; Would it be possible to get confirmation? Thanks :)

Maia, PortSwigger Agent | Last updated: Feb 22, 2023 02:01PM UTC