websecurity@lists.webappsec.org

The Web Security Mailing List

View all threads

DOM Visualization

J
jm
Thu, Mar 31, 2011 1:32 AM

Does anyone know of an approach that can be used to audit DOM node and
object structures on a site and more easily identify shared
structures,  visualization?

Thanks in advance

JM

Does anyone know of an approach that can be used to audit DOM node and object structures on a site and more easily identify shared structures, visualization? Thanks in advance JM
DR
David Rajchenbach-Teller
Thu, Mar 31, 2011 6:18 AM

I'm not sure I understand the question. If you're speaking of client-side DOM, Firefox has Firebug, Chrome & Safari have the Developer Tools, Opera has Dragonfly, and I just can't remember the name of the corresponding tool for IE, but it can be downloaded from Microsoft's website.

In addition, iirc, DOM doesn't allow sharing inside a tree, so I probably didn't understand what you mean by "shared structures".

Cheers,
David

--
David Rajchenbach-Teller
CSO, MLstate

On Mar 31, 2011, at 3:32 AM, jm wrote:

Does anyone know of an approach that can be used to audit DOM node and
object structures on a site and more easily identify shared
structures,  visualization?

Thanks in advance

JM


The Web Security Mailing List

WebSecurity RSS Feed
http://www.webappsec.org/rss/websecurity.rss

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter
http://twitter.com/wascupdates

websecurity@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org

I'm not sure I understand the question. If you're speaking of client-side DOM, Firefox has Firebug, Chrome & Safari have the Developer Tools, Opera has Dragonfly, and I just can't remember the name of the corresponding tool for IE, but it can be downloaded from Microsoft's website. In addition, iirc, DOM doesn't allow sharing inside a tree, so I probably didn't understand what you mean by "shared structures". Cheers, David -- David Rajchenbach-Teller CSO, MLstate On Mar 31, 2011, at 3:32 AM, jm wrote: > Does anyone know of an approach that can be used to audit DOM node and > object structures on a site and more easily identify shared > structures, visualization? > > Thanks in advance > > > JM > > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates > > websecurity@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org
CF
Christian Frichot
Thu, Mar 31, 2011 11:25 PM

sounds like something that Graphviz/Afterglow (secviz.org) could help with!
If you could only somehow get that structured data into something?

Christian
@xntrik

On Thu, Mar 31, 2011 at 9:32 AM, jm jrelint35@gmail.com wrote:

Does anyone know of an approach that can be used to audit DOM node and
object structures on a site and more easily identify shared
structures,  visualization?

Thanks in advance

JM


The Web Security Mailing List

WebSecurity RSS Feed
http://www.webappsec.org/rss/websecurity.rss

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter
http://twitter.com/wascupdates

websecurity@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org

sounds like something that Graphviz/Afterglow (secviz.org) could help with! If you could only somehow get that structured data into something? Christian @xntrik On Thu, Mar 31, 2011 at 9:32 AM, jm <jrelint35@gmail.com> wrote: > Does anyone know of an approach that can be used to audit DOM node and > object structures on a site and more easily identify shared > structures, visualization? > > Thanks in advance > > > JM > > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates > > websecurity@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org >