Vulnerability hunting with Semmle QL: DOM XSS

Posted on Wednesday November 06, 2019  |  MSRC alerts

In two previous blog posts ( part 1 and part 2), we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of the …

Vulnerability hunting with Semmle QL: DOM XSS Read More

The post Vulnerability hunting with Semmle QL: DOM XSS appeared first on Microsoft Security Response Center.