Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

DOM XSS Flagged - Burp Enterprise

gr3p | Last updated: Feb 21, 2023 03:40PM UTC

Hi, I have had a few instances of DOM XSS flagged but I'm thinking its a FP: function gBU() { var protocol = window.location.protocol; var port = window.location.port; var host = window.location.hostname; var path = window.location.pathname; // is port present? if (port != "") port = ":" + port; else port = ""; // remove file expression path = path.substr(0, path.lastIndexOf("/") + 1); // concat url var url = protocol + "//" + host + port + path; return url; } document.getElementById(resultfield).innerHTML = '<img src="' + gBU() + 'static/welcome.gif">'; Would it be possible to get confirmation? Thanks :)

Maia, PortSwigger Agent | Last updated: Feb 22, 2023 02:01PM UTC

Our support service provides technical advice for Burp Suite. Unfortunately, we can't offer specific assistance with investigating individual issues in people's applications, including false positives.

You need to Log in to post a reply. Or register here, for free.