DOMXSS-05 Source-to-Sink Analysis Intermediate Unsolved TaskPilot Agile Board

Fictional Application

TaskPilot Agile Board

Sprint Planning & Kanban Workflow

TaskPilot is a sprint planning board where teams organize user stories. Filtering active cards passes data through a multi-function pipeline in `board-pipeline.js`. Follow the execution trace through each helper function to locate where sanitization is missed.

🎯 Assessment Objective

Perform source-to-sink data-flow analysis, identify where data enters the template, and achieve execution.

Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.

📋

TaskPilot Agile Workflow

Sprint Planning & Board Telemetry

Active Sprint Board (Sprint #14)

Telemetry: 12 User Stories in Active Pipeline

In Progress (1)

Migrate auth tokens to Redis v7

Assigned: Dan W. • Story Points: 5

Code Review (1)

Optimize composite Postgres index

Assigned: Lisa M. • Story Points: 3

Backlog (1)

Add webhook retry jitter backoff

Assigned: Kevin T. • Story Points: 8

Active Sprint Board (Sprint #14)

XSS Successfully Demonstrated!