Properties are accessible in a sandboxed iframe

13

13

13

This vector attempts to see which properties are available on the parent window of a sandboxed iframe.

Created on: Friday, June 7, 2024 at 7:41:00 PM

Updated on: Friday, December 6, 2024 at 11:38:50 PM

Vector type: JS

Vector charset: UTF-8

const props = Object.getOwnPropertyNames(window);
for(const prop in document){
  try{
       props.push(prop);
  } catch{}
}
props.forEach(prop => {
    try {
         if(typeof parent[prop] !== 'undefined') {
             log(prop);
          }
    } catch{}
})

1337