Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

msSetImmediate

secf00tprint | Last updated: Dec 29, 2023 12:06PM UTC

At https://portswigger.net/web-security/dom-based/javascript-injection sinks for DOM-based JavaScript injections are described. There is a sink listed named "msSetImmediate". I couldn't find any information about this in the internet. Or is it a typo and should be "SetImmediate" (https://developer.mozilla.org/en-US/docs/Web/API/Window/setImmediate?retiredLocale=de) Thanks for help

Dominyque, PortSwigger Agent | Last updated: Dec 29, 2023 12:48PM UTC

Hi Thank you for your question. This is not a typo, msSetIntermediate() is a common sink. This is also explained in this article: https://book.hacktricks.xyz/pentesting-web/xss-cross-site-scripting/dom-xss

secf00tprint | Last updated: Dec 29, 2023 02:00PM UTC

Thanks for the reply. Yes, but what does it do? Why is it a sink?

Dominyque, PortSwigger Agent | Last updated: Dec 29, 2023 02:35PM UTC

Hi Unfortunately, explaining the information presented in the labs and learning materials is beyond the scope of technical support. However, there are articles that you can find on the web that will explain this functionality of the msSetImmediate() function for you.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.