Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

msSetImmediate

secf00tprint | Last updated: Dec 29, 2023 12:06PM UTC

At https://portswigger.net/web-security/dom-based/javascript-injection sinks for DOM-based JavaScript injections are described. There is a sink listed named "msSetImmediate". I couldn't find any information about this in the internet. Or is it a typo and should be "SetImmediate" (https://developer.mozilla.org/en-US/docs/Web/API/Window/setImmediate?retiredLocale=de) Thanks for help

Dominyque, PortSwigger Agent | Last updated: Dec 29, 2023 12:48PM UTC

Hi Thank you for your question. This is not a typo, msSetIntermediate() is a common sink. This is also explained in this article: https://book.hacktricks.xyz/pentesting-web/xss-cross-site-scripting/dom-xss

secf00tprint | Last updated: Dec 29, 2023 02:00PM UTC

Thanks for the reply. Yes, but what does it do? Why is it a sink?

Dominyque, PortSwigger Agent | Last updated: Dec 29, 2023 02:35PM UTC