Confidentiality (DOM Access)

Read Document.cookie Read HTMLInputElement Read HTMLTextAreaElement

Integrity (Script Injection)

scripting.executeScript (func) scripting.executeScript (file)

Integrity (DOM Injection)

Add <script src="..."> Modify <script src> Add <iframe src="..."> Add <form action="..."> Modify <form action> Add <button formaction="..."> Modify <button formaction> Add <a href="javascript:"> Modify <a href="javascript:"> Add <a href="data:">