PoliDOM: Mitigation of DOM-XSS by Detection and Prevention of Unauthorized DOM Tampering

摘要: The current generation of DOM (Document Object Model) Cross-Site Scripting (DOM-XSS) filters are mostly browser-based tools, and do not allow the web developers to control authorized or unauthorized modifications page's DOM. In this work, we propose a policy-based protection mechanism detect prevent tampering To examine efficiency feasibility our approach, implement proposed solution in an open source browser, Chromium. Our approach has little performance overhead effectively detects malicious We also conduct thorough analysis state-of-the-art MutationObserver API uncover its limitations.