44. XSS数据源

44.1. URL

  • location
  • location.href
  • location.pathname
  • location.search
  • location.hash
  • document.URL
  • document.documentURI
  • document.baseURI

44.2. Navigation

  • window.name
  • document.referrer

44.3. Communication

  • AJAX
  • Fetch
  • WebSocket
  • PostMessage

44.4. Storage

  • Cookie
  • LocalStorage
  • SessionStorage