Record · corpus.blog/posts/01a0877f-7c4f-72c2-bdaa-d9be7c511e99

Exploiting xdLocalStorage (localStorage and postMessage)

grimhacker.com · published 2 April 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at grimhacker.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 25
Words captured: 4,358

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://url.spec.whatwg.org/

url.spec.whatwg.org

https://en.wikipedia.org/wiki/DNS_spoofing

en.wikipedia.org

https://www.troyhunt.com/understanding-http-strict-transport/

troyhunt.com

https://owasp.org/www-community/attacks/xss/

owasp.org

https://developers.google.com/web/tools/chrome-devtools/storage/localstorage

developers.google.com

https://developers.google.com/web/tools/chrome-devtools/storage/sessionstorage

developers.google.com

https://developers.google.com/web/tools/chrome-devtools/console/javascript

developers.google.com

https://www.w3schools.com/html/html5_webstorage.asp

w3schools.com

https://html.spec.whatwg.org/multipage/webstorage.html

html.spec.whatwg.org

https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://grimhacker.com/exploiting-jsonp/

grimhacker.com

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

developer.mozilla.org

https://owasp.org/www-community/attacks/DOM_Based_XSS

owasp.org

https://pmhook.appcheck-ng.com/

pmhook.appcheck-ng.com

https://appcheck-ng.com/hunting-html-5-postmessage-vulnerabilities/

appcheck-ng.com

https://html.spec.whatwg.org/multipage/web-messaging.html

html.spec.whatwg.org

https://github.com/ofirdagan/cross-domain-local-storage/blob/b6c929feffaed81a4e834ccf19ace7d5f94fc92b/app/scripts/xdLocalStorage.js

github.com

https://github.com/ofirdagan/cross-domain-local-storage/blob/b6c929feffaed81a4e834ccf19ace7d5f94fc92b/app/scripts/xdLocalStoragePostMessageApi.js

github.com

https://github.com/Hengjie

github.com

https://github.com/ofirdagan/cross-domain-local-storage/blob/master/README.md

github.com

https://html.spec.whatwg.org/multipage/origin.html

html.spec.whatwg.org

https://developers.google.com/web/tools/chrome-devtools/javascript

developers.google.com

https://npmjs.com/package/xdlocalstorage

npmjs.com

https://github.com/ofirdagan/cross-domain-local-storage/issues/17

github.com

https://github.com/ofirdagan/cross-domain-local-storage/pull/19

github.com