The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How does "onpopstate" not require any user interaction?

Trevor | Last updated: Dec 30, 2022 11:33PM UTC

From the XSS cheat sheet, the payload below is listed as not requiring user interaction, but I cannot for the life of me get this to trigger without user interaction. Is this really something that can be triggered without user input? <body onpopstate=print()>

Hannah, PortSwigger Agent | Last updated: Jan 04, 2023 01:30PM UTC