Semiconductor Engineering

DOM-Based Cross-Site Scripting

DOM-based attacks are a misunderstood, serious, and pervasive source of risk in contemporary web applications. The language that drives the web, JavaScript, is easy to understand and hard to master; ...
ZDNet

Google working on new Chrome security feature to 'obliterate DOM XSS'

Google has created a new browser API that will help Chrome fight certain types of cross-site scripting (XSS) vulnerabilities, adding another level of protection at the browser level to keep users safe ...
Threat Post

Unpatched Vulnerability on Wix.com Puts Millions of Sites at Risk

Wix websites are vulnerable to reflective DOM cross-site scripting attack that could give attackers control of user’s websites. Update Cloud-based web host Wix.com is vulnerable to a DOM-based ...
Threat Post

Adobe Patches DOM-XSS Flaw in Analytics AppMeasurement for Flash Library

Adobe today patched a DOM-based cross-site scripting vulnerability in the Adobe Analytics AppMeasurement for Flash library. Adobe today patched a vulnerability in the Adobe Analytics AppMeasurement ...