xss-detective
xss-detective copied to clipboard
johnnyg
A userscript to assist in detecting cross-site scripting vulnerabilities
Currently tests need to be loaded after XD. This should be rectified.
Write report of project. Include documentation. Go in to detail about getting around JavaScript quirkiness and any benchmarking done along the way.
Document the process taken to convert the tests from http://ha.ckers.org/xssAttacks.xml.
Document how to add a test which dynamically gets added to the list of tests. Possibly write a script to generate a test stub file. Possibly write a script to...
Finishing porting tests from http://ha.ckers.org/xssAttacks.xml. Possible write a script to automatically generate check function.
XD breaks on random pages. Sometimes this is unavoidable (e.g. pages without forms). Highlighting (during "select input") sometimes doesn't work.
Firefox tries to load the page even after all the tests have finished.
In Opera, when selecting a select box, the list will drop down.