3 ms·
So, an up-to-date DOMinator for Chrome but with no source code available? I quite liked the discussion of issues with current XSS auditor in Chrome although I
by xyzzy123 11y ago
So, an up-to-date DOMinator for Chrome but with no source code available?
I quite liked the discussion of issues with current XSS auditor in Chrome although I felt it was pressing the point a bit to call it "state of the art".
- chipperyman573 11y agoWhat is DOMinator? Google seems to get confused by it being a real word and other searches (DOMinator XSS, DOMinator chrome, etc) didn't turn anything up.
- JoBrad 11y agoCheck out this site: https://developers.google.com/web/tools/chrome-devtools/profile/memory-problems/memory-101#dominators https://developers.google.com/web/tools/chrome-devtools/prof...
- xyzzy123 11y agoSorry, I meant this: http://blog.mindedsecurity.com/2011/05/dominator-project.html http://blog.mindedsecurity.com/2011/05/dominator-project.htm... (pro version now at: dominator.mindedsecurity.com). This project also implemented JS taint tracking, but for FF. They released 2 versions, an open source version and a pro version, both of these have lagged far behind current FF versions, presumably because it's not easy to maintain these patches. That said, DOMinator pro is still used by some pentesters (makes the browser run really slow though). At a 20% or so performance hit, it sounds like this code is faster. The one thing which would be even better would be if I could use it :p