Update addeventlistener-detect.yaml

patch-1
Prince Chaddha 2022-02-04 23:45:48 +05:30 committed by GitHub
parent ee5ae6830f
commit 00eca9b877
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -2,7 +2,7 @@ id: addeventlistener-detect
info:
name: DOM EventListener detection
author: yavolo, dwisiswant0
author: yavolo,dwisiswant0
severity: info
tags: xss,misc
reference: https://portswigger.net/web-security/dom-based/controlling-the-web-message-source
@ -16,4 +16,4 @@ requests:
- type: regex
part: body
regex:
- (([\w\_]+)\.)?add[Ee]vent[Ll]istener\(["']?[\w\_]+["']? # Test cases: https://www.regextester.com/?fam=121118
- (([\w\_]+)\.)?add[Ee]vent[Ll]istener\(["']?[\w\_]+["']? # Test cases: https://www.regextester.com/?fam=121118