← Back to index
IAST DOM Parser XSS
Exercises parser-like DOM sinks that are only present in the full portal rulepack.
HTML payload
<img src=x onerror="console.log('ptk-dom-parser')">
Prime taint sources
DOMParser.parseFromString
Range.createContextualFragment
Element.setHTMLUnsafe (if supported)
ShadowRoot.setHTMLUnsafe (if supported)
(awaiting parser sink)