Ability to scan for "cross domain xss"
Created by: dstrozynski
This is not an issue but rather a feature request or just a question if I'm missing something.
Imagine a situation like this:
A user registers an account and he puts an xss payload into the address field. (this happens on a domain http://abcd.com/)
Next, the system administrator goes to the administration panel and displays the newly added user data. (this happens on a domain http://admin.abcd.com/dashboard/)
Assuming there is a bug in the admin dashboard our xss payload is executed on the internal admin network.
Is there any way to automate testing for scenarios like that with arachni?