Question

I am trying to create a detector in order to flag DOM-based XSS attacks. I am trying to understand how to detect if a change made to DOM is legitimate or not. Am looking for links with helpful information or a short tutorial to:

• create a dom-based xss attack
• Ways to identify whether a change made to dom is legitimate or illegitimate

Thanks

Answer 1

Maybe using the DOM Mutation events…