Properties that are accessible on location

This vector attempts to see which properties are available on the parent location object of sandboxed iframe.

Created by: Gareth Heyes

Created on: 6/7/2024, 8:01:40 PM

Updated on: 6/22/2024, 1:41:37 PM

Vector type: JS

Code used before fuzz:
const props = Object.getOwnPropertyNames(location);
props.forEach(prop => {
    try {
         if(typeof parent.location[prop] !== 'undefined') {
             log(prop);
          }
    } catch{}
})
Template used:
1337
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Fuzz results

Chrome logo
Chrome 125.0.0.0 desktop macOS 10.15.7
Found 1 result
Data
replace
Firefox logo
Firefox 126.0 desktop macOS 10.15
Found 1 result
Data
replace
Safari logo
Safari 17.5 desktop macOS 10.15.7
Found 1 result
Data
replace
Safari logo
Safari 17.5 mobile iOS 17.5.1
Found 1 result
Data
replace