Client XSS Exercise-4

Data Flow

Vulnerable Code

    let ws = new WebSocket(webSocketUrl);
    ws.onmessage = function (evt) {
        
        let rawMsg = evt.data;
        let msgJson = JSON.parse(rawMsg);
        let msg = "Welcome <b>" + msgJson.payload + "</b>!!";
        document.getElementById("msgboard").innerHTML = msg;
    };