IAST document.domain Manipulation

document.domain value (tainted)

Choose which source to prime before assignment.

URL query (?domain=...) URL hash document.cookie localStorage sessionStorage window.name input only

Note: document.domain assignment may fail depending on the current host.