soheilkhodayari / domclobbering Goto Github PK

Add a link to the OWASP cheat sheet in the main page, which has been created with this PR.

Check the test server build status via Github actions automatically after each commit.

The just-the-docs theme seem to access the static assets over HTTP by default rather than HTTPS (see here). To avoid this, the url attribute must be set in the configuration file.

Problem

The current JS syntax highlighter script is not working properly for some of the code snippets in the markups list page.

Suggested Solution

It would be good to replace it with a more advanced syntax highlighting library, like Monaco.

Issue Description

The snippet for online testing of clobbering markups has a syntax error in line 184 (missing closing bracket).

if (v && (!isNaN(v) || v.toString().indexOf('HTML') > -1 || v.toString().indexOf('Element') > -1     
     || v.toString().indexOf('Collection') > -1 || v.toString().indexOf('Window') > -1) {
    is_clobbered = true;
}

The affected webpage is https://domclob.xyz/domc_markups/list.

Here is a correction for the paper as well as the domclob.xyz website about the DOM Clobbering markups. Contrary to previous findings, iframe HTML element with id=x attribute cannot clobber the DOM Tree Accessors (i.e. document.x).

According to the HTML standard on named element lookup on Document interface, only the following elements can clobber the document.x.

• Exposed embed, form, iframe, img, or exposed object elements that have a name content attribute
• Exposed object elements that have an id content attribute
• img elements that have an id content attribute whose value is name, and that have a non-emptyname content attribute

Upon running some real-world tests using BrowserStack, I found that the iframe HTML element with id=x attribute cannot clobber the DOM Tree Accessors at least in the following listed versions of Chrome, Firefox, and Edge.

• Chrome: Tested from version 86 to 123
• Firefox: Tested from version 80 to 124
• Edge: Tested from version 80 to 123