In the DOM We Trust: The Hidden Dangers of Reading the DOM on the Web [pdf](trouge.net)

1 pointsby ArneVogelhace 6 meses1 comments

In the DOM We Trust: The Hidden Dangers of Reading the DOM on the Web [pdf]

https://trouge.net/papers/in_the_dom_we_trust_ccs25.pdf

1 comments

ggmhace 6 meses

As a neophyte, I failed to see them demonstrate injection. They seem to model what injection would mean, but not show how the threat actor got into the flow.

Probably for non neophytes who this is aimed at, that's a given.