← Back to index

IAST DOM URL Navigation and Link Manipulation

Exercises iast_dom_url_navigation and iast_dom_link_manipulation sinks with tainted route, hash, storage, message, and referrer values.

Choose which source to prime, then trigger sinks using that source value.

Taint is read from the selected source. For referrer, open this page via the helper.

DOM link/navigation attribute sinks (href/src/action/formaction).

Link target img target