-
-
Notifications
You must be signed in to change notification settings - Fork 44
Open
Labels
Description
Actually the tool can only detect tag based xss payloads, for detecting attribute based xss, we need to analyse context where they payload is reflected.
May be you can add context analysis if required, to reduce false positives(only for attribute based xss).
This applies only for attribute based xss vulnerability .