Web message DOM XSS occurs if the destination origin for a web message trusts the sender not to transmit malicious data in the message, and handles the data in an unsafe way by passing it into a sink. DOM Invader enables you to log any messages that are sent via the postMessage() method, and modify and resend web messages. Learn more at:
[ Ссылка ]
