Security article
DOM XSS in innerHTML sink using source location.search
DOM XSS in innerHTML sink using source location.search: in this example I just walked through different payloads for XSS DOM, • HTB Academy • DOM-XSS, XSS • dom-xss, htb-academy
in this example I just walked through different payloads for XSS DOM,
I used
https://0a300038039c88f9c042464a00b9009a.web-security-academy.net/?search=
```json
[](http://www.xsisec.com/screenshots/screenshot-20220914-021808.png)
I read about DOM XSS,
```sql
its basically when a users uses javascript data from attacker-controller-source example make use of the URL, and then passes it to the sink .
I learned that a A Sink is a DOM object or function that allows javsacript code execute or render various HTML.
Any application that is vulnerable to DOM-based-cross-site scripting.
If there is a executable path via which data can develop from source to sink.