Browser-navigation DOM XSS via URL parameters

Alerts

• 200022-1 DOM XSS via query param HTML image onerror
• 200022-2 DOM XSS via query param attribute breakout
• 200022-3 DOM XSS via query param JS double-quote breakout
• 200022-4 DOM XSS via query param JS single-quote breakout
• 200022-5 DOM XSS via query param JS template literal breakout
• 200022-6 DOM XSS via query param JS expression execution
• 200022-7 DOM XSS via query param JS regex breakout
• 200022-8 DOM XSS via query param JS block-comment breakout
• 200022-9 DOM XSS via query param script-tag breakout
• 200022-10 DOM XSS via query param event-handler value
• 200022-11 DOM XSS via query param attribute-name event injection
• 200022-12 DOM XSS via query param double-quoted attribute event breakout
• 200022-13 DOM XSS via query param double-quoted resource onerror breakout
• 200022-14 DOM XSS via query param single-quoted attribute event breakout
• 200022-15 DOM XSS via query param unquoted attribute event injection
• 200022-16 DOM XSS via query param SVG tag-name event injection
• 200022-17 DOM XSS via query param javascript: URL
• 200022-18 DOM XSS via query param style-block breakout

Code