IAST postMessage Misuse

Message payload (tainted)

Choose which source to prime for the message payload.

URL query (?payload=...) URL hash document.cookie localStorage sessionStorage window.name input only

Taint is read from ?payload=... or the textarea when you click "Prime taint sources".

Target origin

Cross-origin target triggers postmessage_cross_origin_leak.

Sandboxed iframe to receive postMessage events.

IAST postMessage Misuse Module