The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: DOM XSS in document.write sink using source location.search

Paul | Last updated: Mar 10, 2022 01:10AM UTC

Question about the solution: Break out of the img attribute by searching for: "><svg onload=alert(1)> How does the double quote and angle bracket break out of the attribute exactly? I can't figure out how the double quotes play a role in that.

Paul | Last updated: Mar 10, 2022 01:40AM UTC

The video solution explains nothing, and can't find anything in the instructions on it. Thanks

Michelle, PortSwigger Agent | Last updated: Mar 10, 2022 03:25PM UTC