Skills
.Work. You
Rest

dom-clobbering-anti-pattern

Community

Prevent DOM Clobbering attacks.

Software Engineering#security#xss#javascript#web security#anti-pattern#dom clobbering
Authorigbuend
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps developers identify and prevent DOM Clobbering vulnerabilities, a type of HTML injection that can overwrite global JavaScript variables, leading to security bypasses and potential XSS.

Core Features & Use Cases

  • Vulnerability Detection: Identifies insecure coding patterns where global variables are accessed without proper validation.
  • Secure Coding Examples: Provides clear "BAD" and "GOOD" code snippets in JavaScript, React, and TypeScript to illustrate the anti-pattern and its remediation.
  • Prevention Strategies: Offers actionable steps like avoiding global variables, validating DOM element types, and using object freezing.
  • Use Case: A security auditor reviewing a web application can use this skill to quickly check for common DOM Clobbering weaknesses in the codebase and provide developers with concrete solutions.

Quick Start

Review the current folder for DOM Clobbering anti-patterns.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: dom-clobbering-anti-pattern
Download link: https://github.com/igbuend/grimbard/archive/main.zip#dom-clobbering-anti-pattern

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.