Response title
This is preview!
- Screen name: OLGA
OLGA's Profile
2 Posts
3 Responses
0
Followers
Activity Trend
Last 30 days
- Last 30 days
- Date Interval
From Date : To Date :
Loading Chart...
Show:
- Expanded view
- List view
Private Message
- Hi all,
we use jquery.mobile-1.4.5.min.js in our application.
Burp scan found a Link manipulation (DOM-based) vulnerabilitiy in JQuery Mobile sources:
Link manipulation (DOM-based):
Issue detail
The application may be vulnerable to DOM-based link manipulation. Data is read from location.pathname and passed to the 'href' property of a DOM element via the following statement:
e[0 ] .href= g|| location.pathname
from :
return e.length?g=e.attr("href"):e=f=a("<base>",{href:d}).appendTo("head"),b=a("<a href='testurl' />").prependTo(m),c=b[0].href,e[0].href=g||location.pathname,f&&f.remove(),0===c.indexOf(d)
Here is a comment from Burp People:"could potentially be a open redirection if you can inject a custom path. For example://redirect-host.com/
It’s unlikely this happens on most sites since you would hit a 404 for “redirect-host.com” but may work if the site you are testing has the JavaScript on the 404 page for example."
Could someone tell me if these is a real JQuery Mobile issues and bugs are needed for jquery-mobile or the findings are false positive?
Thanks,
Olga.- Hi all,we use jquery-3.3.1.js in our application.Burp scan found a Link manipulation (DOM-based) vulnerability in JQuery sources:// Anchor tag for parsing the document origin
originAnchor = document.createElement( "a" );
originAnchor.href = location.href;Data is read from location.href and passed to the 'href' property of a DOM element via the following statement:originAnchor.href = location.href;
and one more place:// Set the base href for the created document
// so any parsed elements with URLs
// are based on the document's URL (gh-2965)
base = context.createElement( "base" );
base.href = document.location.href;
context.head.appendChild( base );
} else {
context = document;
}Data is read from document.location.href and passed to the 'href' property of a DOM element via the following statement:base.href = document.location.href;
Could someone tell me if these are real JQuery issues and bugs are needed or the findings are false positive?Thanks,Olga.- «Prev
- Next »
Moderate user : OLGA