Help regarding - DOM XSS and Link manipulation(DOM based)

[shivakumar tandur]

Dear All,

I want to confirm manually DOM XSS and Link manipulation which is DOM based.

Case 1 : DOM based 

URL contains a DOM element ID,it is being used by JS to add CSS on it.

Response is as below and it is reported in burp.

e||(e=$(location).attr("hash")),$(".project").removeClass("selected"),$(e).addClass("selected")}

Please suggest to reconfirm it.

Case 2 : Link Manipulation(DOM based)

URL contains window.location.href and it is being used only to compare the current window URL with another one.

 

Can we consider it as flase positive?

Regards,

Shivakumar S T

[shivakumar tandur]

Dear All,

Any suggestions or ideas ??? 

Please help me in this.

Regards,

Shivakumar S T