D3 href sink (hash)

JS sets lnk.href = location.hash.slice(1). Try /dom/href#javascript:alert(document.domain) then click.

RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only