DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Web Security Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
Web Security
What makes DOM-based XSS distinct enough to require its own hunting strategy, separate from server-side output auditing?
A
It doesn't actually exist as a real category
B
The untrusted source (e.g. location.hash) and the dangerous sink can both be entirely client-side, with the server never involved at all
C
It only affects Internet Explorer
D
It requires a stored database entry, same as stored XSS
Check Answer