插件简介
Abusing Trusted Types to discover XSS sinks.
Discover and test inputs passed into sinks that could lead to DOM XSS vulnerabilities.
A sink is a code pattern that could run arbitrary JavaScript code if the input is malicious, for example: innerHTML, eval, document.write.
This extension adds a panel to DevTools where you can see/filter the sink logs and customize settings.
Keywords (by default: "d0mxss") that are found to be passed in a sink will be highlighted in the extension and in console.
You can then find the stack trace of a specific log:
1. Click to copy the ID,
2. Open Console>Filter and paste the ID,
3. Now you can inspect the stack trace. Click on the function name to open it in the Sources tab.
其他信息
ID bpeblffgmddnafmnmdjohcmkbeifdlnb
版本 1.1.1 上次更新日期 2021年10月12日 大小 39.16KiB 语言 支持1
种语言 开发者 适用浏览器
谷歌浏览器、其他Chromium内核的浏览器
来自该开发者的更多内容
Untrusted Types for DevTools Chrome插件下载
为打击盗链困扰，本站已启用人机验证
微信扫码关注左侧公众号，发送“插件”二字获得验证码，验证码5分钟全站有效