Refactored XSS filter into an asynchronous worker to better handle DOS attempts.

1 files changed, 2 insertions, 2 deletions

diff --git a/src/xss/Exceptions.js b/src/xss/Exceptions.js
index 24fc480..e8db6e1 100644
--- a/src/xss/Exceptions.js
+++ b/src/xss/Exceptions.js
@@ -52,14 +52,14 @@ XSS.Exceptions = (() => {
       // destination or @source matching legacy regexp
       if (this.legacyExceptions &&
           (this.legacyExceptions.test(unescapedDest) &&
-          !this.isBadException(destObj.hostname) ||
+          !this.isBadException(xssReq.destDomain) ||
           this.legacyExceptions.test("@" + unescape(srcUrl))
         )) {
         logEx("Legacy exception", this.legacyExceptions);
         return true;
       }
 
-      if (!srcObj && isGet) {
+      if (!srcOrigin && isGet) {
         if (/^https?:\/\/msdn\.microsoft\.com\/query\/[^<]+$/.test(unescapedDest)) {
           return true; // MSDN from Microsoft VS
         }