TOOL_PTK_PASSIVE_DEFAULT on ZAP

Anchor href manipulated from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value assigned to href attribute.

Generated by OWASP PTK IAST Module

AngularJS $parse expression from cookie

Mon, 01 Jan 0001 00:00:00 +0000

Cookie-controlled expression value reaches AngularJS $parse.

Generated by OWASP PTK IAST Module

AngularJS $parse expression from form input

Mon, 01 Jan 0001 00:00:00 +0000

Form-controlled expression value reaches AngularJS $parse.

Generated by OWASP PTK IAST Module

AngularJS $parse expression from localStorage

Mon, 01 Jan 0001 00:00:00 +0000

Storage-controlled expression value reaches AngularJS $parse.

Generated by OWASP PTK IAST Module

AngularJS $parse expression from postMessage

Mon, 01 Jan 0001 00:00:00 +0000

postMessage-controlled expression value reaches AngularJS $parse.

Generated by OWASP PTK IAST Module

AngularJS expression executed through Function constructor

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data reached dynamic code execution while AngularJS expression parsing/compilation was active. This covers interpolation and $parse-style AngularJS expression injection cases.

Generated by OWASP PTK IAST Module

AngularJS interpolation delimiters in template string

Mon, 01 Jan 0001 00:00:00 +0000

Finds AngularJS code patterns where untrusted data is compiled or parsed as AngularJS expressions/templates, including $parse, $interpolate, $compile, interpolation delimiters and ng-* expression attributes.

Generated by OWASP PTK SAST Module

AngularJS ng-* expression attribute

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Client-side redirect via history.pushState

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL passed to history.pushState, altering client-side navigation.

Generated by OWASP PTK IAST Module

Client-side redirect via location.assign

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL passed to location.assign.

Generated by OWASP PTK IAST Module

Client-side redirect via location.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data assigned to location.href, causing a client-side redirect.

Generated by OWASP PTK IAST Module

Client-side redirect via location.replace

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL passed to location.replace.

Generated by OWASP PTK IAST Module

Client-side route change via history.replaceState

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL passed to history.replaceState, altering client-side navigation state.

Generated by OWASP PTK IAST Module

data: URL assigned to form action

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to form action.

Generated by OWASP PTK IAST Module

data: URL assigned to formAction

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to formAction.

Generated by OWASP PTK IAST Module

data: URL assigned to href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to href.

Generated by OWASP PTK IAST Module

data: URL assigned to iframe.src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to iframe.src.

Generated by OWASP PTK IAST Module

data: URL assigned to script.src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to script.src and treated as executable content.

Generated by OWASP PTK IAST Module

data: URL assigned to src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to a generic src attribute.

Generated by OWASP PTK IAST Module

data: URL navigated via location.assign

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL passed to location.assign.

Generated by OWASP PTK IAST Module

data: URL navigated via location.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL assigned to location.href.

Generated by OWASP PTK IAST Module

data: URL navigated via location.replace

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL passed to location.replace.

Generated by OWASP PTK IAST Module

data: URL opened via window.open

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data: URL passed to window.open.

Generated by OWASP PTK IAST Module

DOM XSS via document.write

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data passed to document.write.

Generated by OWASP PTK IAST Module

DOM XSS via document.write (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached document.write.

Generated by OWASP PTK IAST Module

DOM XSS via DOM mutation (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached mutation sinks.

Generated by OWASP PTK IAST Module

DOM XSS via DOM mutations

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data inserted into the DOM via DOM mutation APIs.

Generated by OWASP PTK IAST Module

DOM XSS via DOMParser.parseFromString

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML parsed through DOMParser.parseFromString with an HTML-like MIME type.

Generated by OWASP PTK IAST Module

DOM XSS via Element.innerHTML

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data assigned to innerHTML (possible DOM XSS).

Generated by OWASP PTK IAST Module

DOM XSS via Element.outerHTML

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data assigned to outerHTML (possible DOM XSS).

Generated by OWASP PTK IAST Module

DOM XSS via Element.setHTMLUnsafe

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML passed to Element.setHTMLUnsafe.

Generated by OWASP PTK IAST Module

DOM XSS via iframe.srcdoc (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached iframe.srcdoc.

Generated by OWASP PTK IAST Module

DOM XSS via inline event handler

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data flowed into an inline event handler.

Generated by OWASP PTK IAST Module

DOM XSS via inline handlers (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached inline event handlers.

Generated by OWASP PTK IAST Module

DOM XSS via innerHTML (Angular)

Mon, 01 Jan 0001 00:00:00 +0000

Detects cases where untrusted data from the DOM (URL, element values, storage, messages, etc.) flows into HTML/JS execution sinks (e.g., innerHTML, outerHTML, document.write, string-based setTimeout, insertAdjacentHTML) without proper sanitization or encoding \u2014 enabling DOM-based cross-site scripting.

Generated by OWASP PTK SAST Module

DOM XSS via innerHTML (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached innerHTML.

Generated by OWASP PTK IAST Module

DOM XSS via insertAdjacentHTML

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML passed into insertAdjacentHTML.

Generated by OWASP PTK IAST Module

DOM XSS via insertAdjacentHTML (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached insertAdjacentHTML.

Generated by OWASP PTK IAST Module

DOM XSS via outerHTML (secondary sources)

Mon, 01 Jan 0001 00:00:00 +0000

Persisted/reflected client-side values reached outerHTML.

Generated by OWASP PTK IAST Module

DOM XSS via Range.createContextualFragment

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML passed to Range.createContextualFragment.

Generated by OWASP PTK IAST Module

DOM XSS via ShadowRoot.setHTMLUnsafe

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML passed to ShadowRoot.setHTMLUnsafe.

Generated by OWASP PTK IAST Module

DOM-based Cookie Manipulation (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects cases where attacker-controlled DOM data is written into cookies (document.cookie or common wrapper functions). Can indicate session fixation, logic control, or preparation for exploit-chains.

Generated by OWASP PTK SAST Module

DOM-based JavaScript Injection (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic execution of attacker-controlled strings in JavaScript sinks such as eval(), Function(), string-based timers, execScript, or script.text assignments. Exploiting these flows lets attackers execute arbitrary JS without relying on HTML injection.

Generated by OWASP PTK SAST Module

DOM-based Link Manipulation (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects DOM code that rewrites link destinations (href attributes) with attacker-controlled data. Manipulated links can mislead users into visiting malicious targets even if navigation is not forced automatically.

Generated by OWASP PTK SAST Module

DOM-based Open Redirection (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects client-side code that can redirect users to attacker-controlled URLs (open redirects). Includes assignment/calls that control window/location/navigation, attr-based redirects, form actions and jQuery variants.

Generated by OWASP PTK SAST Module

DOM-based XSS (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Dynamic AngularJS $compile/$interpolate template

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Dynamic AngularJS $parse expression

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Dynamic code execution via eval

Mon, 01 Jan 0001 00:00:00 +0000

Tainted string executed via eval().

Generated by OWASP PTK IAST Module

Dynamic code execution via Function constructor

Mon, 01 Jan 0001 00:00:00 +0000

Tainted string executed via Function constructor.

Generated by OWASP PTK IAST Module

Dynamic code execution via Function.apply

Mon, 01 Jan 0001 00:00:00 +0000

Tainted string executed via Function.apply.

Generated by OWASP PTK IAST Module

Dynamic template compilation

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic client-side template compilation/rendering where attacker-controlled templates or outputs are injected into the DOM.

Generated by OWASP PTK SAST Module

eval() from storage/referrer taint

Mon, 01 Jan 0001 00:00:00 +0000

Storage/referrer taint reached eval().

Generated by OWASP PTK IAST Module

Exfiltration via fetch headers

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent in fetch() headers (e.g. Authorization, custom tokens).

Generated by OWASP PTK IAST Module

Exfiltration via fetch URL

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data used in fetch() URL, potentially exfiltrating sensitive information.

Generated by OWASP PTK IAST Module

Exfiltration via image.src beacon

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data embedded into image src URL for beacon-style exfiltration.

Generated by OWASP PTK IAST Module

Exfiltration via navigator.sendBeacon

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent via navigator.sendBeacon().

Generated by OWASP PTK IAST Module

Exfiltration via XMLHttpRequest body

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent in XMLHttpRequest.send() body.

Generated by OWASP PTK IAST Module

Exfiltration via XMLHttpRequest headers

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent in XMLHttpRequest.setRequestHeader() values.

Generated by OWASP PTK IAST Module

Exfiltration via XMLHttpRequest URL

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data used in XMLHttpRequest.open() URL.

Generated by OWASP PTK IAST Module

Form action manipulated by tainted route or body input

Mon, 01 Jan 0001 00:00:00 +0000

Tainted route, body, or messaging value changed form action.

Generated by OWASP PTK IAST Module

Form action manipulated from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value assigned to form action.

Generated by OWASP PTK IAST Module

formAction manipulated by tainted route or body input

Mon, 01 Jan 0001 00:00:00 +0000

Tainted route, body, or messaging value changed formAction.

Generated by OWASP PTK IAST Module

Function.apply() from storage/referrer taint

Mon, 01 Jan 0001 00:00:00 +0000

Storage/referrer taint reached Function.apply().

Generated by OWASP PTK IAST Module

Function() from storage/referrer taint

Mon, 01 Jan 0001 00:00:00 +0000

Storage/referrer taint reached Function constructor.

Generated by OWASP PTK IAST Module

IFrame content injection via srcdoc

Mon, 01 Jan 0001 00:00:00 +0000

Tainted HTML assigned to iframe.srcdoc, enabling DOM-based XSS inside the frame.

Generated by OWASP PTK IAST Module

IFrame navigation via src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to iframe.src, causing navigation to untrusted content.

Generated by OWASP PTK IAST Module

javascript: URL assigned to form action

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to form action.

Generated by OWASP PTK IAST Module

javascript: URL assigned to formAction

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to formAction.

Generated by OWASP PTK IAST Module

javascript: URL assigned to href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to href and likely to execute in the current browsing context.

Generated by OWASP PTK IAST Module

javascript: URL assigned to iframe.src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to iframe.src.

Generated by OWASP PTK IAST Module

javascript: URL assigned to src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to a generic src attribute and interpreted as executable content.

Generated by OWASP PTK IAST Module

javascript: URL navigated via location.assign

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL passed to location.assign.

Generated by OWASP PTK IAST Module

javascript: URL navigated via location.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL assigned to location.href.

Generated by OWASP PTK IAST Module

javascript: URL navigated via location.replace

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL passed to location.replace.

Generated by OWASP PTK IAST Module

javascript: URL opened via window.open

Mon, 01 Jan 0001 00:00:00 +0000

Tainted javascript: URL passed to window.open.

Generated by OWASP PTK IAST Module

Lit unsafeHTML taint flow

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic client-side template compilation/rendering where attacker-controlled templates or outputs are injected into the DOM.

Generated by OWASP PTK SAST Module

location.assign redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to location.assign.

Generated by OWASP PTK IAST Module

location.href redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value navigated location.href.

Generated by OWASP PTK IAST Module

location.replace redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to location.replace.

Generated by OWASP PTK IAST Module

Message handler without origin validation

Mon, 01 Jan 0001 00:00:00 +0000

Detects unsafe postMessage usage and message event handling issues (missing origin validation, wildcard targetOrigin, tainted data flowing into DOM/code sinks).

Generated by OWASP PTK SAST Module

navigation.navigate redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to navigation.navigate.

Generated by OWASP PTK IAST Module

Open redirect via Navigation API

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL used in navigation.navigate.

Generated by OWASP PTK IAST Module

Open redirect via window.open

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL used in window.open (possible open redirect).

Generated by OWASP PTK IAST Module

Origin check uses host fragment only

Mon, 01 Jan 0001 00:00:00 +0000

Detects unsafe postMessage usage and message event handling issues (missing origin validation, wildcard targetOrigin, tainted data flowing into DOM/code sinks).

Generated by OWASP PTK SAST Module

postMessage to cross-origin target with tainted payload

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent via window.postMessage to a different origin.

Generated by OWASP PTK IAST Module

postMessage to wildcard origin with tainted payload

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data sent via window.postMessage to wildcard ‘*’ targetOrigin.

Generated by OWASP PTK IAST Module

Prototype pollution influenced fetch() init

Mon, 01 Jan 0001 00:00:00 +0000

A prior tainted prototype write influenced inherited fetch() init fields.

Generated by OWASP PTK IAST Module

React dangerouslySetInnerHTML taint flow

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic client-side template compilation/rendering where attacker-controlled templates or outputs are injected into the DOM.

Generated by OWASP PTK SAST Module

Response field parsed via createContextualFragment

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived HTML parsed via Range.createContextualFragment.

Generated by OWASP PTK IAST Module

Response field parsed via DOMParser

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived HTML parsed via DOMParser.parseFromString.

Generated by OWASP PTK IAST Module

Response field rendered via document.write

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived data reached document.write.

Generated by OWASP PTK IAST Module

Response field rendered via DOM mutation

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived data reached DOM mutation sinks.

Generated by OWASP PTK IAST Module

Response field rendered via innerHTML

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived data reached innerHTML.

Generated by OWASP PTK IAST Module

Response field rendered via insertAdjacentHTML

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived HTML reached insertAdjacentHTML.

Generated by OWASP PTK IAST Module

Response field rendered via outerHTML

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived data reached outerHTML.

Generated by OWASP PTK IAST Module

Response field rendered via setHTMLUnsafe

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived HTML reached Element.setHTMLUnsafe.

Generated by OWASP PTK IAST Module

Response field rendered via ShadowRoot.setHTMLUnsafe

Mon, 01 Jan 0001 00:00:00 +0000

Response-derived HTML reached ShadowRoot.setHTMLUnsafe.

Generated by OWASP PTK IAST Module

Route-controlled history.pushState

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced history.pushState.

Generated by OWASP PTK IAST Module

Route-controlled history.replaceState

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced history.replaceState.

Generated by OWASP PTK IAST Module

Route-controlled Navigation API transition

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced navigation.navigate.

Generated by OWASP PTK IAST Module

setInterval(string) from storage/referrer taint

Mon, 01 Jan 0001 00:00:00 +0000

Storage/referrer taint reached setInterval(string).

Generated by OWASP PTK IAST Module

setTimeout(string) from storage/referrer taint

Mon, 01 Jan 0001 00:00:00 +0000

Storage/referrer taint reached setTimeout(string).

Generated by OWASP PTK IAST Module

Specify postMessage targetOrigin

Mon, 01 Jan 0001 00:00:00 +0000

Detects unsafe postMessage usage and message event handling issues (missing origin validation, wildcard targetOrigin, tainted data flowing into DOM/code sinks).

Generated by OWASP PTK SAST Module

Tainted dangerous key used in prototype write

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data reached a dangerous prototype key write.

Generated by OWASP PTK IAST Module

Tainted data compiled as AngularJS template

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Tainted data passed to AngularJS $parse

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Tainted network destination URL

Mon, 01 Jan 0001 00:00:00 +0000

Detects client-side request destinations for beacon, EventSource, and Axios that can be influenced by attacker-controlled input.

Generated by OWASP PTK SAST Module

Tainted string executed via setInterval

Mon, 01 Jan 0001 00:00:00 +0000

Tainted string passed as the first argument to setInterval(), leading to repeated code execution.

Generated by OWASP PTK IAST Module

Tainted string executed via setTimeout

Mon, 01 Jan 0001 00:00:00 +0000

Tainted string passed as the first argument to setTimeout(), leading to code execution.

Generated by OWASP PTK IAST Module

Tainted URL assigned to element.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to an element href attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to element.src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a non-script/iframe/src element src attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to form action

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a form action attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to formAction

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a formAction attribute.

Generated by OWASP PTK IAST Module

Tainted worker or script loader URL

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic script, worker, and service-worker loader endpoints that can be influenced by attacker-controlled client-side data.

Generated by OWASP PTK SAST Module

Template injection (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic client-side template compilation/rendering where attacker-controlled templates or outputs are injected into the DOM.

Generated by OWASP PTK SAST Module

Template output injected into DOM

Mon, 01 Jan 0001 00:00:00 +0000

Detects dynamic client-side template compilation/rendering where attacker-controlled templates or outputs are injected into the DOM.

Generated by OWASP PTK SAST Module

Untrusted DOM data into createHTMLDocument

Mon, 01 Jan 0001 00:00:00 +0000

Detects untrusted DOM data being written into form metadata (formAction/target/method/value/placeholder), inline style surfaces (style/cssText/background*), document.title, history state, or createHTMLDocument — mutations that influence UI/navigation state without covering classic href/src/action sinks already handled elsewhere.

Generated by OWASP PTK SAST Module

Untrusted DOM data into navigation-adjacent sinks

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Untrusted DOM data into UI mutation sinks

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Web Message Injection (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Detects unsafe postMessage usage and message event handling issues (missing origin validation, wildcard targetOrigin, tainted data flowing into DOM/code sinks).

Generated by OWASP PTK SAST Module

Wildcard reply from message handler

Mon, 01 Jan 0001 00:00:00 +0000

Detects unsafe postMessage usage and message event handling issues (missing origin validation, wildcard targetOrigin, tainted data flowing into DOM/code sinks).

Generated by OWASP PTK SAST Module

window.open redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to window.open.

Generated by OWASP PTK IAST Module