Hacksplaining
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance
Sign Up
Log In
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance Sign Up Log In

DOM-based XSS

Rich web applications often use URI fragments - the part of the URL after the # sign. This has proven a convenient method of storing the user's location within a page in a way that keeps browser history readable, but does not cause extra round trips to the server.

The parts of a URL
Lessons
Glossary
Terms and Conditions
Privacy Policy

© 2026 Hacksplaining Inc. All rights reserved. Questions? Email us at support@hacksplaining.com