Forest Global Training Partners

Cyber Risks · PortSwigger Research

Document domain manipulation (stored DOM-based)

Summary: Stored DOM-based document domain manipulation occurs when user input is stored and later embedded into a response in a part of the DOM that a client-side script processes unsafely, letting an attacker use controllable data to set the document.domain property. Because browsers allow child or parent domains and some quirks permit switching to unrelated domains, an attacker who gets a targeted page and a page they control to set the same document.domain value can interact with the target page in unrestricted ways, with exploitation possibilities comparable to cross-site scripting.

Key Takeaway: The document.domain property is what browsers use to enforce the same origin policy, so a page that sets it from untrusted data can be fully compromised by an attacker-controlled page - a severity PortSwigger places not far behind regular XSS.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related