Web Security · Middle · Question 3 of 75
Which of these is a typical DOM XSS source?
- 1
document.documentElement.langset in your HTML - ✓Correct answer:
location.hash - 3
Math.random()
Explanation
Sources are values an attacker can control: the URL (location, hash, search), document.referrer, postMessage data and stored values from other users.