Skip to main content

DOM XSS in document.write sink using source location.search inside a select element

$ tldr PortSwigger · Cross-Site Scripting (XSS)

Solve the lab

Resources by skill

Cross-Site Scripting (XSS) · Remote Code Execution (RCE)

Comments & tips

Solved this lab a different way? Share it here — comments live in GitHub Discussions.
Last updated: 2026-05-08