DOM Clobbering Websites - Micro Benchmarks - 2

Description: Explore how DOM properties can be manipulated for benchmark testing in browser environments.

Source:

Type: DOC-TYPE-1

Code:

document.clobber_prop;

Sink:

Type: XSS

Code:

document.createElement('script').src

Testing Code:

let script = document.createElement('script');
let clob = document.scripts;
script.src = clob.getAttribute('value');
document.body.appendChild(script);

Payload: