4.2.5. XSS数据源

4.2.5.1. URL

  • location

  • location.href

  • location.pathname

  • location.search

  • location.hash

  • document.URL

  • document.documentURI

  • document.baseURI

4.2.5.3. Communication

  • Ajax

  • Fetch

  • WebSocket

  • PostMessage

4.2.5.4. Storage

  • Cookie

  • LocalStorage

  • SessionStorage