← Back to index
IAST Client JSON Parsing
Triggers the
client.json.parse
sink with tainted JSON payloads.
JSON payload (tainted)
Choose which source to prime before parsing.
URL query (?payload=...)
URL hash
document.cookie
localStorage
sessionStorage
window.name
input only
Prime selected source
Prime ALL sources
JSON.parse(payload)
JSON.parse(selected source)