What is dom based xss
Xss is divided into reflective type, storage type, dom based xss the first two are easy to understand for dom based xss a little around the record.
The common xss is client-side input and direct output in html if there is no filtering js code will be executed.
And dom based xss, it's different.
The following examples are used to explain
Function a () {var str=document.getElementById ('test') .value; document.getElementById ("t") [xss_clean] = "testlink";} test
Anyone who can program can understand what this means.
In fact, DOM based xss outputs data from javascript to html pages. The storage type and reflection type are all aimed at the xss vulnerability of the server application output to the html page.
