browser_click
Click an element on a webpage by CSS selector or visible text, then capture any JavaScript alert, confirm, or prompt dialogs to detect XSS.
Instructions
Click an element on the page. Returns any JavaScript alert/confirm/prompt dialog messages triggered.
PREREQUISITE: browser_open and browser_go must have been called first.
Provide EITHER selector OR text (not both):
selector: CSS selector for the element (e.g. "#login-btn", "button[type=submit]")
text: Visible text to find and click (uses best match, e.g. "Login", "Submit")
XSS DETECTION: If clicking triggers a JavaScript alert() dialog, the dialog message is returned. This is how you verify reflected/stored XSS — inject a payload, navigate to the page, and check for alerts.
Args: selector: CSS selector to click (e.g. "#submit", "button.login") text: Visible text to find and click (e.g. "Login", "Submit Order") session_name: Browser session to use (default: "default")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| text | No | ||
| tab_id | No | ||
| selector | No | ||
| session_name | No | default |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |