update: addeventlistener-detect

miscellaneous/addeventlistener-detect.yaml

@@ -1,8 +1,8 @@
 id: addeventlistener-detect
 
 info:
-  name: AddEventlistener detection
-  author: yavolo
+  name: DOM EventListener detection
+  author: yavolo, dwisiswant0
   severity: info
   tags: xss,misc
   reference: https://portswigger.net/web-security/dom-based/controlling-the-web-message-source
@@ -10,10 +10,10 @@ info:
 requests:
   - method: GET
     path:
-      - '{{BaseURL}}'
+      - "{{BaseURL}}"
 
     matchers:
-      - type: word
+      - type: regex
         part: body
-        words:
-          - 'window.addEventListener('
+        regex:
+          - (([\w\_]+)\.)?add[Ee]vent[Ll]istener\(["']?[\w\_]+["']? # Test cases: https://www.regextester.com/?fam=121118