Files
codeql/javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/tst3.js
2025-02-28 13:29:30 +01:00

16 lines
568 B
JavaScript

var foo = document.getElementById("foo");
var data = JSON.parse(decodeURIComponent(window.location.search.substr(1))); // $ Source
foo.setAttribute("src", data.src); // $ Alert
foo.setAttribute("HREF", data.p); // $ Alert
foo.setAttribute("width", data.w);
foo.setAttribute("xlink:href", data.p) // $ Alert
foo.setAttributeNS('xlink', 'href', data.p); // $ Alert
foo.setAttributeNS('foobar', 'href', data.p); // $ Alert
foo.setAttributeNS('baz', 'width', data.w);
for (var p in data)
foo.setAttribute(p, data[p]); // not flagged since attribute name is unknown