Home → Questions →

Add a wait or how to determine if javascript page is fully rendered

• Edit

JL

21 May, 2015 06:21 PM

We have a javascript page we created with a vulnerability in it to test scanners we are evaluating. One example we have isn't finding the vulnerability. Is there a way you can make the scanners wait for an element to load before the scans are executed? I just want to ensure it isn't finding it because the page isn't fully rendered.

1. Support Staff 1 Posted by Tasos Laskos on 21 May, 2015 06:33 PM

   

   It sort of depends on how you're doing that, if it's via setTimeout or AJAX Arachni will wait until all request have either completed of the HTTP request time-out has been reached.
   That's in addition to the browser reported ready-states.

   If it's more involved than that then it'll have the timeout of the browser jobs.

   I'll need to see your test case to be certain.

   • Edit

2. 2 Posted by JL on 22 May, 2015 02:50 PM

   

   I am going to follow up via an email to [email blocked] with a link to a URL that we are trying to get to scan. It is similar to my xss post but built a little differently.

   Once we get to the bottom of that we can post a solution in this post if it turns out to be a javascript or wait variable we had to adjust.

   Thanks

   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 22 May, 2015 02:51 PM

   

   Sounds good.

   • Edit

4. Support Staff 4 Posted by Tasos Laskos on 02 Jun, 2015 08:09 PM

   

   Fixed by: https://github.com/Arachni/arachni/commit/88a8ac6c397651b7cf443aa62...

   • Edit

5. Tasos Laskos closed this discussion on 02 Jun, 2015 08:09 PM.