Cookie manipulation via the DOM
🔍 An XSS that isn’t where you’d look for it Today I want to share a very instructive case of DOM-based cookie manipulation, a variant of XSS that doesn’t jump out at you during a first pass over the requests, because the problem isn’t in a parameter reflected directly in the HTML, but in a […]