Source code
Revision control
Copy as Markdown
Other Tools
function determineInjectionSinkDescription(testCase) {
const targetWindowDescription = ("targetWindow" in testCase) ?
testCase.targetWindow.name : "";
const element = ("elementId" in testCase) ?
window.document.getElementById(testCase.elementId) : null;
const elementDescription = element ? (element.localName +
(element.target ? ("[target=" + element.target + "]") : "")) : null;
return ((elementDescription ? (elementDescription + ".") :
(targetWindowDescription ? (targetWindowDescription + ".") : ""))) +
testCase.propertySequence.join(".");
}
function assignJavascriptURLToInjectionSink(testCase) {
const element = ("elementId" in testCase) ?
document.getElementById(testCase.elementId) : null;
let currentObject = element ? element : testCase.targetWindow;
const propertySequence = testCase.propertySequence;
for (let i = 0; i < propertySequence.length - 1; ++i) {
currentObject = currentObject[propertySequence[i]];
}
currentObject[propertySequence.at(-1)] =
"javascript:parent.postMessage('executed', '*')";
if ("navigationFunction" in testCase) {
element[testCase.navigationFunction]();
}
}
function encodeURIWithApostrophes(uriWithApostrophes) {
const encodedURI = encodeURI(uriWithApostrophes);
return encodedURI.replaceAll("'","%27");
}