security-review-owasp-dom-clobbering-prevention

What problem does it solve?

This Skill helps reviewers find DOM clobbering risks where user-controlled HTML, named-property collisions, or unsafe global property reads can alter browser behavior and undermine security decisions.

Core Features & Use Cases

• Sanitization Review: Checks whether injected HTML is properly sanitized, including protection against dangerous id and name attributes.
• Global Access Review: Flags unsafe reads from window, document, or implicit globals that may be clobberable by attacker-controlled markup.
• Review Discipline: Separates confirmed weaknesses from gaps in evidence and produces findings with concrete code-path or behavior references.
• Use Case: Review a rich-text rendering flow, a client-side router, or a callback lookup path to see whether DOM naming collisions can influence security-critical logic.

Quick Start

Ask the skill to review the target files or flow for DOM clobbering prevention weaknesses and return evidence-based findings, gaps, and passed checks.